PT-2024-5087 · Automationdirect · P3-550E

Matt Wiseman · Published 2024-05-23 · Updated 2024-06-10 · CVE-2024-24963

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: AutomationDirect P3-550E version 1.2.10.9

Description: A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality. This issue can be triggered by a specially crafted network packet, leading to a stack-based buffer overflow. An attacker can send an unauthenticated packet to exploit this vulnerability, potentially allowing remote execution of arbitrary code. The vulnerability occurs at offset 0xb6e84 of version 1.2.10.9 of the P3-550E firmware.

Recommendations: For AutomationDirect P3-550E version 1.2.10.9, consider disabling the FileSelect functionality in the Programming Software Connection until a patch is available to prevent exploitation of the stack-based buffer overflow vulnerability.

Exploit

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

BDU:2024-05614

CVE-2024-24963

Affected Products

P3-550E

References · 8

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2024-1939 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-24963 · Security Note
• https://bdu.fstec.ru/vul/2024-05614 · Security Note
• https://osv.dev/vulnerability/CVE-2024-24963 · Vendor Advisory
• https://safe-surf.ru/upload/VULN-new/VULN.2024-05-27.1.pdf · Security Note
• https://t.me/cvenotify/81221 · Telegram Post
• https://t.me/aptreports/10155 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-144-01 · Note