Stack-Based Buffer Overflow Vulnerability in AutomationDirect P3-550E Firmware

CVE-2024-24963

What is CVE-2024-24963?

A stack-based buffer overflow vulnerability exists within the Programming Software Connection FileSelect functionality of AutomationDirect's P3-550E version 1.2.10.9. This issue can be exploited by sending a specially crafted network packet, leading to potential stack-based buffer overflow at specific offsets. Such an attack could allow unauthorized access to the system, enabling an attacker to potentially manipulate the firmware or execute arbitrary code. Organizations using the affected version are advised to apply necessary mitigations and updates to safeguard their systems.

References