HIGH✓ PATCH🇬🇧 English

CVE-2024-24851

CVSS 7.5v3.1pub. 2024-05-28upd. 2025-02-12

A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Automationdirect P1 540

    HW
    Automationdirect
    wszystkie wersje

  • Automationdirect P1 540 Firmware

    OS
    Automationdirect
    1.2.10.104.1.1.10

  • Automationdirect P1 550

    HW
    Automationdirect
    wszystkie wersje

  • Automationdirect P1 550 Firmware

    OS
    Automationdirect
    1.2.10.104.1.1.10

  • Automationdirect P2 550

    HW
    Automationdirect
    wszystkie wersje

  • Automationdirect P2 550 Firmware

    OS
    Automationdirect
    1.2.10.104.1.1.10

  • Automationdirect P3 530

    HW
    Automationdirect
    wszystkie wersje

  • Automationdirect P3 530 Firmware

    OS
    Automationdirect
    1.2.10.94.1.1.10

  • Automationdirect P3 550

    HW
    Automationdirect
    wszystkie wersje

  • Automationdirect P3 550e

    HW
    Automationdirect
    wszystkie wersje

  • Automationdirect P3 550e Firmware

    OS
    Automationdirect
    1.2.10.94.1.1.10

  • Automationdirect P3 550 Firmware

    OS
    Automationdirect
    1.2.10.94.1.1.10
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
Memory
CWE
Referencje

Powiązane podatności

CVE-2024-24962CRITICAL9.8PL ✓ten sam produkt

Stack-based buffer overflow w AutomationDirect P3-550E — zdalny RCE bez uwierzytelnienia

CVE-2024-21785CRITICAL9.8PL ✓ten sam produkt

AutomationDirect P3-550E — nieusunięty kod debugowania w interfejsie Telnet

CVE-2024-23601CRITICAL9.8PL ✓ten sam produkt

AutomationDirect P3-550E — code injection przez plik scan_lib.bin

CVE-2024-22187CRITICAL9.1PL ✓ten sam produkt

Dowolny zapis w pamięci (write-what-where) w AutomationDirect P3-550E

CVE-2024-24963CRITICAL9.8PL ✓ten sam produkt

Stack-based buffer overflow w AutomationDirect P3-550E — RCE bez uwierzytelnienia