Description
A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to stack-based buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability.This CVE tracks the stack-based buffer overflow that occurs at offset `0xb6e98` of v1.2.10.9 of the P3-550E firmware.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AutomationDirect | P3-550E | 1.2.10.9 | — |
Advisories 1
- ICSA-24-144-01 AutomationDirect Productivity PLCs CISA ICS & IT advisories · May 23, 2024