CVE-2024-24947

Katalog CVE

CVSS 8.2 · High EPSS 0,84%

Kerentanan Out-of-bounds Write pada automationdirect p3-550e firmware, automationdirect p3-550 firmware +4 lainnya. Skor CVSS 3.1 8.2 (High) menurut cisco.com.

Deskripsi (NVD)

A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger these vulnerability.This CVE tracks the heap corruption that occurs at offset `0xb68c4` of version 1.2.10.9 of the P3-550E firmware, which occurs when a call to `memset` relies on an attacker-controlled length value and corrupts any trailing heap allocations.

Rincian

Terbit di NVD

28 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.2 (High), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,84% peluang dieksploitasi; lebih tinggi dari 56,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1937 exploit · advisory pihak ketiga
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1937 exploit · advisory pihak ketiga