CVE-2024-24954

AutomationDirect P3-550E (FW 1.2.10.9; related P3-550/P3-530 family in Rad Red Hat doc) is affected by CVE-2024-24954, a set of out-of-bounds/null-byte write vulnerabilities in the Programming Software Connection FileSystem API. Talos details show multiple CVEs in the same firmware, with CVE-2024...

CVE-2024-24957

AutomationDirect Productivity PLCs (P3-550E CPU) with FW 1.2.10.9 are affected by CVE-2024-24957, part of a set of out-of-bounds/write vulnerabilities in the Programming Software Connection FileSystem API. The Talos report documents multiple null-byte write and related overflow issues that can be...

CVE-2024-24959

AutomationDirect Productivity PLCs P3-550E CPU (FW 1.2.10.9; SW 4.1.1.10) are affected by multiple CVEs (CVE-2024-24959 among others) in the Programming Software Connection FileSystem API and related components. Talos reports several out-of-bounds write vulnerabilities and null-byte write flaws a...

CVE-2024-24956

Summary of CVE-2024-24956 (AutomationDirect P3-550E) : Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API of AutomationDirect P3-550E FW 1.2.10.9, enabling heap-based memory corruption via specially crafted network packets. The Talos report det...

CVE-2024-24958

Summary: CVE-2024-24958 affects AutomationDirect P3-550E (FW 1.2.10.9) and relates to an out-of-bounds write in the Programming Software Connection FileSystem API, causing heap-based memory corruption when processing crafted network packets. The TALOS report documents multiple null-byte write var...

CVE-2024-24955

CVE-2024-24955 concerns the AutomationDirect P3-550E CPU (FW 1.2.10.9) where the Programming Software Connection FileSystem API exhibits out-of-bounds/null-byte write vulnerabilities. Talos details show multiple related cases (IMM 0x0F03/04/06/0E/14/16) causing heap-based memory corruption by wri...

CVE-2024-24963

A confirmed vulnerability in AutomationDirect P3-550E (Productivity3000) firmware v1.2.10.9 and related Programming Software Connection FileSelect handler (IMM 0x12) causes a stack-based buffer overflow when constructing a local filename from attacker-supplied path data. Talos details show an 0x1...

CVE-2024-24962

CVE-2024-24962 affects AutomationDirect Productivity3000 P3-550E CPU (FW 1.2.10.9) with a stack-based buffer overflow in the Programming Software Connection FileSelect path handling. TALOS reports the vulnerability at offset 0xb6e98 in the IMM 0F FileSelect_Handler, caused by unsafely using strnc...

CVE-2024-23315

CVE-2024-23315 affects AutomationDirect Productivity PLCs, specifically the P3-550E series (Firmware 1.2.10.9). The TALOS/Red Hat and CVE reports describe a remote, unauthenticated read-what-where vulnerability in the Programming Software Connection IMM 01A1 Memory Read feature. An attacker can s...

CVE-2024-22187

CVE-2024-22187 is a write-what-where vulnerability in AutomationDirect P3-550E (FW 1.2.10.9, SW 4.1.1.10) exposed via the Programming Software Connection service over UDP/port 9999. The flaw allows an unauthenticated remote attacker to write arbitrary data to arbitrary memory locations, enabling ...

CVE-2024-21785

CVE-2024-21785 describes a leftover debug code vulnerability in AutomationDirect P3-550E (FW 1.2.10.9) affecting the Telnet Diagnostic Interface. Talos details show an attacker who can reach the device over ModbusRTU or the Telnet path to unlock an in-device diagnostic CLI or enable remote diagno...

CVE-2024-23601

AutomationDirect P3-550E (FW 1.2.10.9; SW 4.1.1.10) is affected by CVE-2024-23601. Cisco Talos reports a code-injection vulnerability in the scan_lib.bin module: the binary is only CRC-validated, allowing a remote attacker to replace scan_lib.bin with malicious code that executes on load or durin...

CVE-2024-35324

CVE-2024-35324 affects Douchat 4.0.5 and is described as an arbitrary file upload vulnerability via the endpoint Public/Plugins/webuploader/server/preview.php. The CVSSv3.1 base score is 9.8 (CRITICAL) with network attack vector, no privileges required, no user interaction, and impacts to confide...

CVE-2024-33849

The CVE-2024-33849 entry concerns ci solution CI-Out-of-Office Manager (versions up to 6.0.0.77) that uses a hard-coded cryptographic key. The issue, described across multiple sources (including PT-Security and Red Hat), implies potential unauthorized access or decryption of sensitive data due to...

CVE-2024-35400

CVE-2024-35400 concerns TOTOLINK CP900L (v4.1.5cu.798_B20221228). A stack overflow in the SetPortForwardRules function triggered via the desc parameter is reported, potentially enabling denial of service. Connected sources consistently identify the same vulnerable component and input vector but d...

CVE-2024-5274

CVE-2024-5274 is a type confusion flaw in Google Chrome’s V8 engine (Chromium-based) that could allow a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. The vulnerability affects Chrome versions prior to 125.0.6422.112 (Windows, macOS, Linux) and is cla...

CVE-2024-35399

TOTOLINK CP900L v4.1.5cu.798_B20221228 is affected by a stack overflow in the loginAuth function triggered by the password parameter. The root cause is improper validation of input length/size in loginAuth, enabling possible arbitrary code execution or denial of service. Documented impact is high...

CVE-2024-4429

OpenText iManager 3.2.6.0200 is affected by a Cross-Site Request Forgery vulnerability. The issue could lead to sensitive information disclosure as described in CVE-2024-4429. Connected sources confirm the vulnerable component is the OpenText iManager web console, with the root cause tied to CSRF...

CVE-2024-3969

CVE-2024-3969 affects OpenText iManager 3.2.6.0200 and is described as an XML External Entity (XXE) injection vulnerability that could lead to remote code execution by parsing untrusted XML payloads. The public records indicate a CVSSv3.1 base score of 9.8 (CRITICAL) with network attack vector, n...

CVE-2024-35398

Totolink CP900L firmware version 4.1.5cu.798_B20221228 contains a stack overflow in the setMacFilterRules function, triggered by the desc parameter. Exploitation could allow a remote attacker to impact the device’s confidentiality, integrity, and availability (potential remote code execution or D...