Vulnerability Spotlight: Denial-of-service vulnerabilities in Micrium uc-HTTP’s HTTP server
Summary: Cisco Talos discovered two denial-of-service vulnerabilities in Micrium uC-HTTP's HTTP server, tracked as TALOS-2020-1193/CVE-2020-13582 (unchecked return value) and TALOS-2020-1194/CVE-2020-13583 (null pointer dereference), both triggered by specially crafted HTTP requests. Talos confirmed the flaws affect uC-HTTP version 3.01.00, an HTTP server built for embedded systems running the µC/OS II or µC/OS III RTOS kernels, and worked with Micrium under its coordinated disclosure policy to make an update available.
What you should know: These flaws sit in an embedded HTTP server on RTOS-based devices, where a single crafted request can take the service down and the update depends on Micrium and the device makers shipping it - not on your patching cycle.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-13582CVE-2020-13583
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026