CVE-2024-23315

Katalog CVE

CVSS 7.5 · High EPSS 0,96%

Kerentanan Improper Access Control pada automationdirect p3-550e firmware, automationdirect p3-550 firmware +4 lainnya. Skor CVSS 3.1 7.5 (High) menurut cisco.com.

Deskripsi (NVD)

A read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can send an unauthenticated packet to trigger this vulnerability.

Rincian

Terbit di NVD

28 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

0,96% peluang dieksploitasi; lebih tinggi dari 60,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yZ72AI/sa00037 advisory vendor
• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1941 exploit · advisory pihak ketiga
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1941 exploit · advisory pihak ketiga