CVE-2024-23601

—

CVSS 3.1

9.8 critical

EPSS

<1%p52

Published

May 28, 2024 (May 28, 2024)

Modified

Jun 17, 2026

Description

A code injection vulnerability exists in the scan_lib.bin functionality of AutomationDirect P3-550E 1.2.10.9. A specially crafted scan_lib.bin can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Vendors: automationdirect
Products: p3-550e firmware, p3-550 firmware, p3-530 firmware, p2-550 firmware, p1-550 firmware, p1-540 firmware
Weakness: CWE-345, CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news2 stories

Out-of-bounds reads in Adobe Acrobat; Foxit PDF Reader contains vulnerability that could lead to SYSTEM

Cisco TalosMay 29, 16:08 UTC · May 29, 2024Vulnerability CVE-2024-30311 CVE-2024-30312 CVE-2024-29072+26 CVEs

Attackers are impersonating a road toll payment processor across the U.S. in phishing attacks

Cisco TalosMay 30, 18:01 UTC · May 30, 2024Phishing & fraud CVE-2024-21785 CVE-2024-23601 CVE-2024-24963+1 CVEs