Approved changes feed: RSS · Atom

cpe:2.3:o:automationdirect:p3-550e_firmware:4.1.1.10:*:*:*:*:*:*:*

part: o version: 4.1.1.10 update: *

VendorAutomationdirect (5dd60aaf-eea3-5732-9a9c-5b671c0ed914)
ProductP3 550E Firmware (6ff100d6-4589-5885-914f-4ac20a240ad4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-24963 vulnerable 2026-06-08 06:29:42.109937 Details available
CRITICAL (9.8)
A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to stack-based buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability.This CVE tracks the stack-based buffer overflow that occurs at offset `0xb6e84` of v1.2.10.9 of the P3-550E firmware.
Published: 2024-05-28T15:30:16.410Z
Updated: 2025-02-13T17:40:42.505Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24962 vulnerable 2026-06-08 06:29:42.108404 Details available
CRITICAL (9.8)
A stack-based buffer overflow vulnerability exists in the Programming Software Connection FileSelect functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to stack-based buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability.This CVE tracks the stack-based buffer overflow that occurs at offset `0xb6e98` of v1.2.10.9 of the P3-550E firmware.
Published: 2024-05-28T15:30:16.326Z
Updated: 2025-02-13T17:40:41.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24947 vulnerable 2026-06-08 06:29:42.099337 Details available
HIGH (8.2)
A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger these vulnerability.This CVE tracks the heap corruption that occurs at offset `0xb68c4` of version 1.2.10.9 of the P3-550E firmware, which occurs when a call to `memset` relies on an attacker-controlled length value and corrupts any trailing heap allocations.
Published: 2024-05-28T15:30:18.231Z
Updated: 2025-02-13T17:40:36.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24946 vulnerable 2026-06-08 06:29:42.097805 Details available
HIGH (8.2)
A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger these vulnerability.This CVE tracks the heap corruption that occurs at offset `0xb686c` of version 1.2.10.9 of the P3-550E firmware, which occurs when a call to `memset` relies on an attacker-controlled length value and corrupts any trailing heap allocations.
Published: 2024-05-28T15:30:18.127Z
Updated: 2025-02-13T17:40:36.211Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24851 vulnerable 2026-06-08 06:29:41.898442 Details available
HIGH (7.5)
A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability.
Published: 2024-05-28T15:30:18.716Z
Updated: 2025-02-13T17:40:31.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23601 vulnerable 2026-06-08 06:29:39.986963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23315 vulnerable 2026-06-08 06:29:37.265796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22187 vulnerable 2026-06-08 06:29:34.042401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21785 vulnerable 2026-06-08 06:27:36.622768 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.