CVE-2024-23315

A read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can send an unauthenticated packet to trigger th...

CVE-2024-24947

A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger these vulnerability.This...

AutomationDirect P3-550E Programming Software Connection CurrDir heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2024-1937 AutomationDirect P3-550E Programming Software Connection CurrDir heap-based buffer overflow vulnerability May 28, 2024 CVE Number CVE-2024-24947,CVE-2024-24946 SUMMARY A heap-based buffer overflow vulnerability exists in the Programming Software Connecti...

AutomationDirect P3-550E 安全漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. A security vulnerability exists in AutomationDirect P3-550E version 1.2.10.9, which stems from the presence of a residual debugging code vulnerability that could allow an attacker to send specially crafte...

AutomationDirect P3-550E 访问控制错误漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. An access control error vulnerability exists in AutomationDirect P3-550E version 1.2.10.9, which can be exploited by an attacker to cause an information disclosure by sending specially crafted network...

AutomationDirect P3-550E 缓冲区错误漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. An out-of-bounds write vulnerability exists in AutomationDirect P3-550E version 1.2.10.9, which can be exploited by an attacker to cause a denial of service via specially crafted network packets...

AutomationDirect P3-550E 缓冲区错误漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. A buffer error vulnerability exists in AutomationDirect P3-550E version 1.2.10.9. An attacker could exploit this vulnerability to cause heap-based memory corruption via specially crafted network packets...

AutomationDirect P3-550E 缓冲区错误漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. A buffer error vulnerability exists in AutomationDirect P3-550E version 1.2.10.9. An attacker could exploit this vulnerability to cause heap-based memory corruption via specially crafted network packets...

AutomationDirect P3-550E 缓冲区错误漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. A buffer error vulnerability exists in AutomationDirect P3-550E version 1.2.10.9. An attacker could exploit this vulnerability to cause heap-based memory corruption via specially crafted network packets...

AutomationDirect P3-550E 缓冲区错误漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. A buffer error vulnerability exists in AutomationDirect P3-550E version 1.2.10.9. An attacker could exploit this vulnerability to cause heap-based memory corruption via specially crafted network packets...

AutomationDirect P3-550E 缓冲区错误漏洞

The AutomationDirect P3-550E is a programmable control system PLC from AutomationDirect USA. A buffer error vulnerability exists in AutomationDirect P3-550E version 1.2.10.9. An attacker could exploit this vulnerability to cause heap-based memory corruption via specially crafted network packets...

PT-2024-3908 · Automationdirect · Automationdirect P3-550E

Name of the Vulnerable Software and Affected Versions: AutomationDirect P3-550E version 1.2.10.9 Description: The issue is related to out-of-bounds write vulnerabilities in the Programming Software Connection FileSystem API functionality. Specially crafted network packets can lead to heap-based...