CISA also recommends users take the following measures to protect themselves from social engineering attacks:
Do not click web links or open attachments in unsolicited email messages.
Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.
Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.
No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.
Credit: Matt Wiseman (CISCO TALOS)
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2024-21785 | CWE-489 Active Debug Code | 9.8 Critical |
Leftover debug code exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted series of network requests can lead to unauthorized access. An attacker can send a sequence of requests to trigger this vulnerability. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
| CVE-2024-23601 | CWE-345 Insufficient Verification of Data Authenticity | 9.8 Critical |
A code injection vulnerability exists in the scan_lib.bin functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted scan_lib.bin can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
| CVE-2024-24962 | CWE-121 Stack-based Buffer Overflow | 9.8 Critical |
A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to stack-based buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
| CVE-2024-24963 | CWE-121 Stack-based Buffer Overflow | 9.8 Critical |
A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to stack-based buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
| CVE-2024-22187 | CWE-284 Improper Access Control | 9.1 Critical |
A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to an arbitrary write. An attacker can send an unauthenticated packet to trigger this vulnerability. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
| CVE-2024-24946 | CWE-787 Out-of-bounds Write | 8.2 High |
A length exceeded buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
| CVE-2024-24947 | CWE-787 Out-of-bounds Write | 8.2 High |
An allocation failed buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a denial of service. An attacker can send an unauthenticated packet to trigger this vulnerability. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
| CVE-2024-24954 | CWE-787 Out-of-bounds Write | 8.2 High |
A null-byte write vulnerability exists in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead to heap-based memory corruption. An attacker can send malicious packets to trigger these vulnerabilities. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
| CVE-2024-24955 | CWE-787 Out-of-bounds Write | 8.2 High |
A null-byte write vulnerability exists in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead to heap-based memory corruption. An attacker can send malicious packets to trigger these vulnerabilities. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
| CVE-2024-24956 | CWE-787 Out-of-bounds Write | 8.2 High |
A null-byte write vulnerability exists in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead to heap-based memory corruption. An attacker can send malicious packets to trigger these vulnerabilities. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
| CVE-2024-24957 | CWE-787 Out-of-bounds Write | 8.2 High |
A null-byte write vulnerability exists in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead to heap-based memory corruption. An attacker can send malicious packets to trigger these vulnerabilities. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
| CVE-2024-24958 | CWE-787 Out-of-bounds Write | 8.2 High |
A null-byte write vulnerability exists in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead to heap-based memory corruption. An attacker can send malicious packets to trigger these vulnerabilities. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
| CVE-2024-24959 | CWE-787 Out-of-bounds Write | 8.2 High |
A null-byte write vulnerability exists in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead to heap-based memory corruption. An attacker can send malicious packets to trigger these vulnerabilities. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
| CVE-2024-23315 | CWE-284 Improper Access Control | 7.5 High |
A read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can send an unauthenticated packet to trigger this vulnerability. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
| CVE-2024-24851 | CWE-805 Buffer Access with Incorrect Length Value | 7.5 High |
A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability. Mitigation: AutomationDirect recommends that users: Mitigation: Update the Productivity Suite programming software to version 4.2.0.x or higher. Mitigation: Update Productivity PLC's firmware to the latest version. ↗ Affected, fixed & timelineAffected:
Mitigation: Although Automation Networks and Systems come equipped with built-in password protection mechanisms, this represents a fraction of the security measures needed to safeguard these systems. It is imperative that Automation Control System Networks integrate data protection and security measures that match, if not exceed, the robustness of conventional business computer systems. AutomationDirect advi… Mitigation: AutomationDirect has identified the following mitigation for instances where systems cannot be upgraded to latest version: Mitigation: Physically disconnect the PLC from any external networks, including the internet, local area networks (LANs), and other interconnected systems. Mitigation: Configure network segmentation to isolate PLC from other devices and systems withing the organization. Mitigation: Implement firewall rules or network access control (NAC) policies to block incoming and outgoing traffic to the PLC. Mitigation: Please refer to the following link for supporting information related to security considerations. https://support.automationdirect.com/docs/securityconsiderations.pdf Mitigation: If you have any questions regarding this issue, please contact AutomationDirect Technical Support at 770-844-4200 or 800-633-0405 for further assistance. |
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2024-21785 | 9.8 Critical | AutomationDirect P3-550E A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted… |
| CVE-2024-23601 | 9.8 Critical | AutomationDirect P3-550E A code injection vulnerability exists in the scan_lib.bin functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted scan_lib.bin can le… |
| CVE-2024-24962 | 9.8 Critical | AutomationDirect P3-550E A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10… |
| CVE-2024-24963 | 9.8 Critical | AutomationDirect P3-550E A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10… |
| CVE-2024-22187 | 9.1 Critical | AutomationDirect P3-550E A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P3-550E 1.… |
| CVE-2024-24946 | 8.2 High | AutomationDirect P3-550E A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. … |
| CVE-2024-24947 | 8.2 High | AutomationDirect P3-550E A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. … |
| CVE-2024-24954 | 8.2 High | AutomationDirect P3-550E Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2… |
| CVE-2024-24955 | 8.2 High | AutomationDirect P3-550E Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2… |
| CVE-2024-24956 | 8.2 High | AutomationDirect P3-550E Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2… |
| CVE-2024-24957 | 8.2 High | AutomationDirect P3-550E Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2… |
| CVE-2024-24958 | 8.2 High | AutomationDirect P3-550E Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2… |
| CVE-2024-24959 | 8.2 High | AutomationDirect P3-550E Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2… |
| CVE-2024-23315 | 7.5 High | AutomationDirect P3-550E A read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality of AutomationDirect P3-550E 1.2.10.9… |
| CVE-2024-24851 | 7.5 High | AutomationDirect P3-550E A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.2.10.9. A… |
Named by the advisory itself. Each CVE links to its tracked detail page.
No KEV-catalogued vendors are named in this publication.