CVE-2024-24962

A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to stack-based buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability.This CVE tracks the stack-based buffer overflow that occurs at offset `0xb6e98` of v1.2.10.9 of the P3-550E firmware.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:automationdirect:p3-550e_firmware:1.2.10.9:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p3-550e_firmware:4.1.1.10:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:p3-550e:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:automationdirect:p3-550_firmware:1.2.10.9:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p3-550_firmware:4.1.1.10:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:p3-550:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:o:automationdirect:p3-530_firmware:1.2.10.9:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p3-530_firmware:4.1.1.10:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:p3-530:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:o:automationdirect:p2-550_firmware:1.2.10.10:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p2-550_firmware:4.1.1.10:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:p2-550:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
OR cpe:2.3:o:automationdirect:p1-550_firmware:1.2.10.10:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p1-550_firmware:4.1.1.10:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:p1-550:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
OR cpe:2.3:o:automationdirect:p1-540_firmware:1.2.10.10:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p1-540_firmware:4.1.1.10:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:p1-540:-:*:*:*:*:*:*:*

History

12 Feb 2025, 18:31

Type Values Removed Values Added
CPE cpe:2.3:o:automationdirect:p2-550_firmware:1.2.10.10:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p3-530_firmware:4.1.1.10:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:p3-530:-:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p3-550_firmware:1.2.10.9:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p3-530_firmware:1.2.10.9:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p2-550_firmware:4.1.1.10:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p3-550_firmware:4.1.1.10:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p1-540_firmware:1.2.10.10:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:p1-540:-:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p3-550e_firmware:4.1.1.10:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:p3-550:-:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:p3-550e:-:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p1-540_firmware:4.1.1.10:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p1-550_firmware:4.1.1.10:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p3-550e_firmware:1.2.10.9:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:p2-550:-:*:*:*:*:*:*:*
cpe:2.3:o:automationdirect:p1-550_firmware:1.2.10.10:*:*:*:*:*:*:*
cpe:2.3:h:automationdirect:p1-550:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : 9.8
v2 : unknown
v3 : unknown
CWE CWE-121 CWE-787
References () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1939 - () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1939 - Exploit, Third Party Advisory
References () https://talosintelligence.com/vulnerability_reports/TALOS-2024-1939 - () https://talosintelligence.com/vulnerability_reports/TALOS-2024-1939 - Exploit, Third Party Advisory
First Time Automationdirect p3-550e
Automationdirect p3-530 Firmware
Automationdirect
Automationdirect p3-530
Automationdirect p3-550 Firmware
Automationdirect p3-550e Firmware
Automationdirect p2-550 Firmware
Automationdirect p1-540 Firmware
Automationdirect p1-550 Firmware
Automationdirect p3-550
Automationdirect p1-540
Automationdirect p2-550
Automationdirect p1-550

10 Jun 2024, 17:16

Type Values Removed Values Added
References
  • () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1939 -

28 May 2024, 17:11

Type Values Removed Values Added
New CVE

Information

Published : 2024-05-28 16:15

Updated : 2025-02-12 18:31


NVD link : CVE-2024-24962

Mitre link : CVE-2024-24962


JSON object : View

Products Affected

automationdirect

  • p1-550
  • p3-530
  • p1-540_firmware
  • p2-550
  • p2-550_firmware
  • p3-550e_firmware
  • p1-540
  • p3-550
  • p1-550_firmware
  • p3-550e
  • p3-530_firmware
  • p3-550_firmware
CWE
CWE-787

Out-of-bounds Write