| |
Vulnerability CVE-2024-24947
Published: 2024-05-28
| Description: |
A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger these vulnerability.This CVE tracks the heap corruption that occurs at offset `0xb68c4` of version 1.2.10.9 of the P3-550E firmware, which occurs when a call to `memset` relies on an attacker-controlled length value and corrupts any trailing heap allocations. |
Type:
CWE-787
References: |
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1937
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
