CVE-2024-24851
High
Description
A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability.
SeverityHigh
CVSS7.5
Exploit probability—
ProductAutomationdirect P3-550e Firmware
PublishedMay 28, 2024
First seenMay 28, 2024
Weakness typeCWE-805CWE-805
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| automationdirect p3-550e_firmware | 1.2.10.9, 4.1.1.10 | — |
| automationdirect p3-550_firmware | 1.2.10.9, 4.1.1.10 | — |
| automationdirect p3-530_firmware | 1.2.10.9, 4.1.1.10 | — |
| automationdirect p2-550_firmware | 1.2.10.10, 4.1.1.10 | — |
| automationdirect p1-550_firmware | 1.2.10.10, 4.1.1.10 | — |
| automationdirect p1-540_firmware | 1.2.10.10, 4.1.1.10 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.