CVE-2022-24942

CRITICAL

Micrium uC-HTTP 3.01.01 - Remote Code Execution via HTTP Request

Title source: llm

Heap based buffer overflow in HTTP Server functionality in Micrium uC-HTTP 3.01.01 allows remote code execution via HTTP request.

Core 2

Core References

Exploit, Third Party Advisory patch

Permissions Required, Vendor Advisory vendor-advisory

CVSS v3 9.1

EPSS 0.0186

EPSS Percentile 76.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

CWE

CWE-122 CWE-787

Status published

Products (1)

silabs/micrium_uc-http 3.01.01

Published Nov 15, 2022

Tracked Since Feb 18, 2026