CVE-2024-24962criticalCWE-121

CVE-2024-24962: falha crítica em AutomationDirect P3-550E

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar P3-550E

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 1.2%
A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to stack-based buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability.This CVE tracks the stack-based buffer overflow that occurs at offset `0xb6e98` of v1.2.10.9 of the P3-550E firmware.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
AutomationDirect · P3-550E
CVEs relacionadas — AutomationDirect P3-550E

No mesmo produto, das mais perigosas para as menos.

CVE-2024-21785CRITICALCVE-2024-21785EPSS 1.5%CVE-2024-24851HIGHCVE-2024-24851EPSS 1.4%CVE-2024-24963CRITICALCVE-2024-24963EPSS 1.2%CVE-2024-22187CRITICALCVE-2024-22187EPSS 1.0%CVE-2024-23315HIGHCVE-2024-23315EPSS 1.0%CVE-2024-24947HIGHCVE-2024-24947EPSS 0.8%