CVE-2024-24851: p1-540 Memory Corruption

Description

A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability.

Is your site exposed to CVE-2024-24851?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-805 CWE-805

CWE-787 Out-of-bounds Write

Affected Products

Vendor	Product	Versions
automationdirect	p3-550e_firmware	All
automationdirect	p3-550e_firmware	All
automationdirect	p3-550e	All
automationdirect	p3-550_firmware	All
automationdirect	p3-550_firmware	All
automationdirect	p3-550	All
automationdirect	p3-530_firmware	All
automationdirect	p3-530_firmware	All
automationdirect	p3-530	All
automationdirect	p2-550_firmware	All
automationdirect	p2-550_firmware	All
automationdirect	p2-550	All
automationdirect	p1-550_firmware	All
automationdirect	p1-550_firmware	All
automationdirect	p1-550	All
automationdirect	p1-540_firmware	All
automationdirect	p1-540_firmware	All
automationdirect	p1-540	All

References

Advisories & Patches

https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003y1F2AQ/sa00025 https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003y1F2AQ/sa00025

Exploits

https://talosintelligence.com/vulnerability_reports/TALOS-2024-1936 https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1936 https://talosintelligence.com/vulnerability_reports/TALOS-2024-1936 https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1936

Frequently Asked Questions

What is CVE-2024-24851? +

A heap-based buffer overflow vulnerability exists in the Programming Software Connection FiBurn functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a buffer overflow. An attacker can send an unauthenticated packet to trigger this vulnerability. It has a CVSS v3.1 base score of 7.5 (HIGH).

How severe is CVE-2024-24851? +

CVE-2024-24851 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2024-24851? +

CVE-2024-24851 affects products from automationdirect, specifically: p1-540, p1-540_firmware, p1-550, p1-550_firmware, p2-550, p2-550_firmware, p3-530, p3-530_firmware, p3-550, p3-550_firmware, p3-550e, p3-550e_firmware. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-24851? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-12087 9.1

Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source …

CVE-2025-20315 8.6

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker …

CVE-2024-37305 8.2

oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and …

CVE-2025-23319 8.1

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause …

CVE-2025-23318 8.1