Approved changes feed: RSS · Atom

cpe:2.3:h:automationdirect:p3-550e:1.2.10.9:*:*:*:*:*:*:*

part: h version: 1.2.10.9 update: *

VendorAutomationdirect (5dd60aaf-eea3-5732-9a9c-5b671c0ed914)
ProductP3 550E (96409273-f2d9-5359-8afb-618285ae7c78)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-24947 vulnerable 2026-06-08 06:29:42.099067 Details available
HIGH (8.2)
A heap-based buffer overflow vulnerability exists in the Programming Software Connection CurrDir functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to denial of service. An attacker can send an unauthenticated packet to trigger these vulnerability.This CVE tracks the heap corruption that occurs at offset `0xb68c4` of version 1.2.10.9 of the P3-550E firmware, which occurs when a call to `memset` relies on an attacker-controlled length value and corrupts any trailing heap allocations.
Published: 2024-05-28T15:30:18.231Z
Updated: 2025-02-13T17:40:36.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22187 vulnerable 2026-06-08 06:29:34.040408 Details available
CRITICAL (9.1)
A write-what-where vulnerability exists in the Programming Software Connection Remote Memory Diagnostics functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to an arbitrary write. An attacker can send an unauthenticated packet to trigger this vulnerability.
Published: 2024-05-28T15:30:15.762Z
Updated: 2025-02-13T17:33:33.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21785 vulnerable 2026-06-08 06:27:36.620944 Details available
CRITICAL (9.8)
A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted series of network requests can lead to unauthorized access. An attacker can send a sequence of requests to trigger this vulnerability.
Published: 2024-05-28T15:30:14.463Z
Updated: 2025-02-13T17:33:19.226Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.