Medium severity4.0NVD Advisory· Published Nov 18, 2024· Updated Sep 8, 2026

CVE-2024-42385

Description

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM certificate contains unexpected characters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cesanta/Mongoose
cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*
Range: <=7.14
Cesanta/Mongoose Web Serverllm-fuzzy2 versions
<=7.14+ 1 more
- (no CPE)range: <=7.14
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-42385nvdThird Party Advisory
cert-portal.siemens.com/productcert/html/ssa-142885.htmlnvd

News mentions

Siemens Reyrolle 7SR5
CISA ICS Advisories

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000