CVE-2024-23315

A read-what-where vulnerability exists in the Programming Software Connection IMM 01A1 Memory Read functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can send an unauthenticated packet to trigger this vulnerability.

• CWE-284

• https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yZ72AI/sa00037Vendor Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1941Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1941Exploit, Third Party Advisory
• https://community.automationdirect.com/s/internal-database-security-advisory/a4GPE0000003yZ72AI/sa00037Vendor Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1941Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1941Exploit, Third Party Advisory

Published

May 28, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23309The LevelOne WBR-6012 router with firmware R0.40e6 has an au…8.1
• CVE-2024-2331A vulnerability was found in SourceCodester Tourist Reservat…9.8
• CVE-2024-23310A use-after-free vulnerability exists in the sopen_FAMOS_rea…9.8
• CVE-2024-23312Uncontrolled search path for some Intel(R) Binary Configurat…6.7
• CVE-2024-23313An integer underflow vulnerability exists in the sopen_FAMOS…9.8
• CVE-2024-23314When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK syste…7.5
• CVE-2024-23316HTTP request desynchronization in Ping Identity PingAccess, …8.8
• CVE-2024-23317External Control of File Name or Path (CWE-73) in the Contro…6.3
• CVE-2024-23319Mattermost Jira Plugin fails to protect against logout CSRF …3.5
• CVE-2024-2332A vulnerability was found in SourceCodester Online Mobile Ma…7.2
• CVE-2024-23320Improper Input Validation vulnerability in Apache DolphinSch…8.8
• CVE-2024-23321For RocketMQ versions 5.2.0 and below, under certain conditi…8.8