CVE-2024-22187

Katalog CVE

CVSS 9.1 · Critical EPSS 1,0%

Kerentanan Improper Access Control pada automationdirect p3-550e firmware, automationdirect p3-550 firmware +4 lainnya. Skor CVSS 3.1 9.1 (Critical) menurut cisco.com.

Deskripsi (NVD)

A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to an arbitrary write. An attacker can send an unauthenticated packet to trigger this vulnerability.

Rincian

Terbit di NVD

28 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.1 (Critical), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 63,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yXV2AY/sa00036 advisory vendor
• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1940 exploit · advisory pihak ketiga
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1940 exploit · advisory pihak ketiga