PT-2024-3909 · Automationdirect · P3-550E

Matt Wiseman

·

Published

2024-05-23

·

Updated

2024-06-10

·

CVE-2024-24959

CVSS v2.0

8.5

High

VectorAV:N/AC:L/Au:N/C:N/I:P/A:C
Name of the Vulnerable Software and Affected Versions: AutomationDirect P3-550E version 1.2.10.9
Description: The issue is related to out-of-bounds write vulnerabilities in the Programming Software Connection FileSystem API functionality. These vulnerabilities can be triggered by specially crafted network packets, leading to heap-based memory corruption. An attacker can exploit this by sending malicious packets, potentially causing a denial of service. The arbitrary null-byte write vulnerability is located in firmware 1.2.10.9 of the P3-550E at offset 0xb6c18.
Recommendations: For AutomationDirect P3-550E version 1.2.10.9, consider disabling the Programming Software Connection FileSystem API functionality until a patch is available to prevent exploitation. Restrict access to the vulnerable API endpoint to minimize the risk of heap-based memory corruption. Avoid using the offset 0xb6c18 in the affected firmware until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2024-04319
CVE-2024-24959

Affected Products

P3-550E