CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2024-22187

CVSS 9.1v3.1pub. 2024-05-28upd. 2025-02-12

A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to an arbitrary write. An attacker can send an unauthenticated packet to trigger this vulnerability.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

  • Automationdirect P1 540

    HW
    Automationdirect
    wszystkie wersje

  • Automationdirect P1 540 Firmware

    OS
    Automationdirect
    1.2.10.104.1.1.10

  • Automationdirect P1 550

    HW
    Automationdirect
    wszystkie wersje

  • Automationdirect P1 550 Firmware

    OS
    Automationdirect
    1.2.10.104.1.1.10

  • Automationdirect P2 550

    HW
    Automationdirect
    wszystkie wersje

  • Automationdirect P2 550 Firmware

    OS
    Automationdirect
    1.2.10.104.1.1.10

  • Automationdirect P3 530

    HW
    Automationdirect
    wszystkie wersje

  • Automationdirect P3 530 Firmware

    OS
    Automationdirect
    1.2.10.94.1.1.10

  • Automationdirect P3 550

    HW
    Automationdirect
    wszystkie wersje

  • Automationdirect P3 550e

    HW
    Automationdirect
    wszystkie wersje

  • Automationdirect P3 550e Firmware

    OS
    Automationdirect
    1.2.10.94.1.1.10

  • Automationdirect P3 550 Firmware

    OS
    Automationdirect
    1.2.10.94.1.1.10
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2024-24963CRITICAL9.8PL ✓ten sam produkt

Stack-based buffer overflow w AutomationDirect P3-550E — RCE bez uwierzytelnienia

CVE-2024-23601CRITICAL9.8PL ✓ten sam produkt

AutomationDirect P3-550E — code injection przez plik scan_lib.bin

CVE-2024-21785CRITICAL9.8PL ✓ten sam produkt

AutomationDirect P3-550E — nieusunięty kod debugowania w interfejsie Telnet

CVE-2024-24962CRITICAL9.8PL ✓ten sam produkt

Stack-based buffer overflow w AutomationDirect P3-550E — zdalny RCE bez uwierzytelnienia

CVE-2024-24946HIGH8.2ten sam produkt

A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality...