Skip to content
OpenAdvisories
Critical · 9.1 CVE-2024-22187 EUVD-2024-19783

A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect …

Published May 28, 2024 · Updated Feb 13, 2025 · Assigned by talos

Description

A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to an arbitrary write. An attacker can send an unauthenticated packet to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
AutomationDirect P3-550E 1.2.10.9 —

Advisories 1

References