Heap-Based Buffer Overflow Vulnerability in AutomationDirect P3-550E Firmware

CVE-2024-24946

What is CVE-2024-24946?

A heap-based buffer overflow vulnerability has been identified in the Programming Software Connection CurrDir functionality of AutomationDirect's P3-550E firmware version 1.2.10.9. This vulnerability manifests when an attacker sends a specially crafted network packet that exploits the memset function, allowing manipulation of an attacker-controlled length value which inadvertently corrupts trailing heap allocations. As a result, this can lead to denial of service, potentially disrupting operations and affecting system integrity. Organizations using the affected version should implement immediate mitigations to safeguard against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References