CVE-2024-22187

Name of the Vulnerable Software and Affected Versions AutomationDirect P3-550E version 1.2.10.9

Description A write-what-where issue exists in the Programming Software Connection Remote Memory Diagnostics functionality. This allows an attacker to send a specially crafted network packet, leading to an arbitrary write. The vulnerability can be triggered by an unauthenticated packet, potentially enabling a remote attacker to execute arbitrary code or cause a denial of service.

Recommendations For AutomationDirect P3-550E version 1.2.10.9, consider disabling the Remote Memory Diagnostics functionality until a patch is available to prevent potential exploitation. Restrict access to the affected component to minimize the risk of arbitrary code execution or denial of service.