Stack-Based Buffer Overflow Vulnerability in AutomationDirect P3-550E Firmware
CVE-2024-24962

9.8CRITICAL

Key Information:

Vendor

Automationdirect

Status
P3-550e
Vendor
CVE Published:
28 May 2024

What is CVE-2024-24962?

A stack-based buffer overflow vulnerability has been identified in the FileSelect functionality of the Programming Software for AutomationDirect's P3-550E version 1.2.10.9. An attacker could exploit this vulnerability by sending specially crafted network packets, potentially leading to a compromise of the system's integrity. The vulnerability occurs at offset 0xb6e98 in the affected firmware version. Due to the nature of this vulnerability, it is imperative for users to apply security measures and updates to safeguard against possible exploitation.

Affected Version(s)

P3-550E 1.2.10.9

References

https://talosintelligence.com/vulnerability_reports/TALOS...
https://www.talosintelligence.com/vulnerability_reports/T...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Discovered by Matt Wiseman of Cisco Talos.
.