CVE-2024-21785

A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted series of network requests can lead to unauthorized access. An attacker can send a sequence of requests to trigger this vulnerability.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yaj2AA/sa00038	Vendor Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1942	Exploit Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1942	Exploit Third Party Advisory
https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yaj2AA/sa00038	Vendor Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1942	Exploit Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1942	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:automationdirect:p3-550e_firmware:1.2.10.9:::::::*
	cpe:2.3:o:automationdirect:p3-550e_firmware:4.1.1.10:::::::*

cpe:2.3:h:automationdirect:p3-550e:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

OR	cpe:2.3:o:automationdirect:p3-550_firmware:1.2.10.9:::::::*
	cpe:2.3:o:automationdirect:p3-550_firmware:4.1.1.10:::::::*

cpe:2.3:h:automationdirect:p3-550:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

OR	cpe:2.3:o:automationdirect:p3-530_firmware:1.2.10.9:::::::*
	cpe:2.3:o:automationdirect:p3-530_firmware:4.1.1.10:::::::*

cpe:2.3:h:automationdirect:p3-530:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

OR	cpe:2.3:o:automationdirect:p2-550_firmware:1.2.10.10:::::::*
	cpe:2.3:o:automationdirect:p2-550_firmware:4.1.1.10:::::::*

cpe:2.3:h:automationdirect:p2-550:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

OR	cpe:2.3:o:automationdirect:p1-550_firmware:1.2.10.10:::::::*
	cpe:2.3:o:automationdirect:p1-550_firmware:4.1.1.10:::::::*

cpe:2.3:h:automationdirect:p1-550:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

OR	cpe:2.3:o:automationdirect:p1-540_firmware:1.2.10.10:::::::*
	cpe:2.3:o:automationdirect:p1-540_firmware:4.1.1.10:::::::*

cpe:2.3:h:automationdirect:p1-540:-:*:*:*:*:*:*:*

History

12 Feb 2025, 17:30

Type	Values Removed	Values Added
CWE		NVD-CWE-Other
First Time		Automationdirect p3-550 Automationdirect p1-550 Firmware Automationdirect p1-550 Automationdirect p2-550 Firmware Automationdirect p3-550e Automationdirect p3-530 Automationdirect p3-550e Firmware Automationdirect p2-550 Automationdirect p1-540 Firmware Automationdirect p3-530 Firmware Automationdirect Automationdirect p3-550 Firmware Automationdirect p1-540
CPE		cpe:2.3:o:automationdirect:p2-550_firmware:1.2.10.10:::::::* cpe:2.3:h:automationdirect:p1-550:-:::::::* cpe:2.3:o:automationdirect:p3-530_firmware:1.2.10.9:::::::* cpe:2.3:h:automationdirect:p1-540:-:::::::* cpe:2.3:h:automationdirect:p3-530:-:::::::* cpe:2.3:h:automationdirect:p3-550:-:::::::* cpe:2.3:o:automationdirect:p1-550_firmware:1.2.10.10:::::::* cpe:2.3:o:automationdirect:p1-540_firmware:1.2.10.10:::::::* cpe:2.3:h:automationdirect:p2-550:-:::::::* cpe:2.3:h:automationdirect:p3-550e:-:::::::* cpe:2.3:o:automationdirect:p1-540_firmware:4.1.1.10:::::::* cpe:2.3:o:automationdirect:p1-550_firmware:4.1.1.10:::::::* cpe:2.3:o:automationdirect:p3-530_firmware:4.1.1.10:::::::* cpe:2.3:o:automationdirect:p3-550e_firmware:1.2.10.9:::::::* cpe:2.3:o:automationdirect:p3-550e_firmware:4.1.1.10:::::::* cpe:2.3:o:automationdirect:p3-550_firmware:4.1.1.10:::::::* cpe:2.3:o:automationdirect:p2-550_firmware:4.1.1.10:::::::* cpe:2.3:o:automationdirect:p3-550_firmware:1.2.10.9:::::::*
References	~~() https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yaj2AA/sa00038 -~~	() https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yaj2AA/sa00038 - Vendor Advisory
References	~~() https://talosintelligence.com/vulnerability_reports/TALOS-2024-1942 -~~	() https://talosintelligence.com/vulnerability_reports/TALOS-2024-1942 - Exploit, Third Party Advisory
References	~~() https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1942 -~~	() https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1942 - Exploit, Third Party Advisory

21 Nov 2024, 08:55

Type	Values Removed	Values Added
References	~~() https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yaj2AA/sa00038 -~~	() https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yaj2AA/sa00038 -
References	~~() https://talosintelligence.com/vulnerability_reports/TALOS-2024-1942 -~~	() https://talosintelligence.com/vulnerability_reports/TALOS-2024-1942 -
References	~~() https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1942 -~~	() https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1942 -

10 Jun 2024, 17:16

Type	Values Removed	Values Added
References		() https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1942 -

29 May 2024, 13:15

Type	Values Removed	Values Added
References		() https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yaj2AA/sa00038 -
Summary		(es) Existe una vulnerabilidad de código de depuración sobrante en la funcionalidad de la interfaz de diagnóstico Telnet de AutomationDirect P3-550E 1.2.10.9. Una serie de solicitudes de red especialmente manipuladas pueden provocar un acceso no autorizado. Un atacante puede enviar una secuencia de solicitudes para desencadenar esta vulnerabilidad.

28 May 2024, 16:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-05-28 16:15

Updated : 2025-02-12 17:30

NVD link : CVE-2024-21785

Mitre link : CVE-2024-21785

CVE.ORG link : CVE-2024-21785

JSON object : View

Products Affected

automationdirect

p3-550_firmware
p2-550_firmware
p1-540_firmware
p1-550
p3-530_firmware
p2-550
p1-550_firmware
p3-550e
p3-550
p3-530
p3-550e_firmware
p1-540

CWE

CWE-489

Active Debug Code

NVD-CWE-Other

{"id": "CVE-2024-21785", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "talos-cna@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-05-28T16:15:12.073", "references": [{"url": "https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yaj2AA/sa00038", "tags": ["Vendor Advisory"], "source": "talos-cna@cisco.com"}, {"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1942", "tags": ["Exploit", "Third Party Advisory"], "source": "talos-cna@cisco.com"}, {"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1942", "tags": ["Exploit", "Third Party Advisory"], "source": "talos-cna@cisco.com"}, {"url": "https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yaj2AA/sa00038", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1942", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1942", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "talos-cna@cisco.com", "description": [{"lang": "en", "value": "CWE-489"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "A leftover debug code vulnerability exists in the Telnet Diagnostic Interface functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted series of network requests can lead to unauthorized access. An attacker can send a sequence of requests to trigger this vulnerability."}, {"lang": "es", "value": "Existe una vulnerabilidad de c\u00f3digo de depuraci\u00f3n sobrante en la funcionalidad de la interfaz de diagn\u00f3stico Telnet de AutomationDirect P3-550E 1.2.10.9. Una serie de solicitudes de red especialmente manipuladas pueden provocar un acceso no autorizado. Un atacante puede enviar una secuencia de solicitudes para desencadenar esta vulnerabilidad."}], "lastModified": "2025-02-12T17:30:02.237", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:automationdirect:p3-550e_firmware:1.2.10.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4A393F14-3BD3-44DE-B06F-9235AB62C68F"}, {"criteria": "cpe:2.3:o:automationdirect:p3-550e_firmware:4.1.1.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A4772E7-8788-4DB5-98CE-25F0255E0386"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:automationdirect:p3-550e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5086EF1F-C3CE-4B5F-A352-67CE332A6C4F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:automationdirect:p3-550_firmware:1.2.10.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC227F17-D280-4C74-A73E-8F92158686BE"}, {"criteria": "cpe:2.3:o:automationdirect:p3-550_firmware:4.1.1.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CC4A2E2-DF6D-427A-88E6-54FD6D11BDFC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:automationdirect:p3-550:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BB4DDF3B-AB0E-4DDD-9865-D4EEDCCA78DE"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:automationdirect:p3-530_firmware:1.2.10.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0462A9CE-4EAA-4C12-9147-F530C42328D3"}, {"criteria": "cpe:2.3:o:automationdirect:p3-530_firmware:4.1.1.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8277A48-94C7-40F3-A822-F6311B2CDA94"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:automationdirect:p3-530:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D58D4140-C719-4EDA-8963-667F9FF21970"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:automationdirect:p2-550_firmware:1.2.10.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AAF96AFD-40E3-4FB6-BAD7-067D9E257A08"}, {"criteria": "cpe:2.3:o:automationdirect:p2-550_firmware:4.1.1.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D476CC45-B4A1-4210-9347-9854BB0A86AA"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:automationdirect:p2-550:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "386D70E8-70D6-4D25-818C-2218E1B1AC6C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:automationdirect:p1-550_firmware:1.2.10.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B7F3A1F-BD96-49A7-A340-0E5E1893326C"}, {"criteria": "cpe:2.3:o:automationdirect:p1-550_firmware:4.1.1.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27710A58-507C-43BB-849F-7238F5D6D9ED"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:automationdirect:p1-550:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8FAF2C99-BC5F-4E99-A3A8-FBBDDC24C933"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:automationdirect:p1-540_firmware:1.2.10.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01C6DFFC-374B-4314-9230-53BD01BD6574"}, {"criteria": "cpe:2.3:o:automationdirect:p1-540_firmware:4.1.1.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "51095762-A87C-4A1D-A4E2-679462DC8FA9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:automationdirect:p1-540:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4DB6B9FC-390E-43FD-9DF9-AAB1A9CDAA48"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "talos-cna@cisco.com"}

9.8 /10