CVE-2024-24851

Katalog CVE

CVSS 7.5 · High EPSS 1,4%

Kerentanan Buffer Access with Incorrect Length Value pada automationdirect p3-550e firmware, automationdirect p3-550 firmware +4 lainnya. Skor CVSS 3.1 7.5 (High) menurut cisco.com.

Deskripsi (NVD)

A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability.

Rincian

Terbit di NVD

28 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-805: Buffer Access with Incorrect Length Value
CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 72,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003y1F2AQ/sa00025 advisory vendor
• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1936 exploit · advisory pihak ketiga
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1936 exploit · advisory pihak ketiga