CVE-2024-24959

Name of the Vulnerable Software and Affected Versions: AutomationDirect P3-550E version 1.2.10.9

Description: The issue is related to out-of-bounds write vulnerabilities in the Programming Software Connection FileSystem API functionality. These vulnerabilities can be triggered by specially crafted network packets, leading to heap-based memory corruption. An attacker can exploit this by sending malicious packets, potentially causing a denial of service. The arbitrary null-byte write vulnerability is located in firmware 1.2.10.9 of the P3-550E at offset 0xb6c18.

Recommendations: For AutomationDirect P3-550E version 1.2.10.9, consider disabling the Programming Software Connection FileSystem API functionality until a patch is available to prevent exploitation. Restrict access to the vulnerable API endpoint to minimize the risk of heap-based memory corruption. Avoid using the offset 0xb6c18 in the affected firmware until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.