CVE-2024-22187: Critical severity automationdirect p3-550e firmware vulnerability
A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to an arbitrary write. An attacker can send an unauthenticated packet to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22187?
CVE-2024-22187 is classified as a high severity vulnerability due to its potential for arbitrary write through unauthenticated network packets.
What type of vulnerability is CVE-2024-22187?
CVE-2024-22187 is a write-what-where vulnerability affecting the Programming Software Connection Remote Memory Diagnostics functionality.
How do I fix CVE-2024-22187?
To mitigate CVE-2024-22187, ensure that the affected AutomationDirect P3-550E software is updated to the latest version provided by the vendor.
Who is affected by CVE-2024-22187?
CVE-2024-22187 affects users of the AutomationDirect P3-550E version 1.2.10.9.
What can an attacker do with CVE-2024-22187?
An attacker can exploit CVE-2024-22187 by sending specially crafted network packets to execute arbitrary write operations.