Talos discovers denial-of-service vulnerability in Microsoft Audio Bus; Potential remote code execution in popular open-source PLC

Summary: Cisco Talos disclosed two patched Microsoft vulnerabilities: TALOS-2024-2008 (CVE-2024-45383), a mishandling of IRP requests in the Windows HD Audio Bus Driver that lets an attacker send multiple IRP Complete requests and force a Blue Screen of Death, and TALOS-2024-2062 (CVE-2024-38140), a memory corruption issue in the Pragmatic General Multicast server in the Windows 10 kernel triggered by a sequence of specially crafted network packets. Talos also disclosed three OpenPLC vulnerabilities, two causing denial of service via crafted Ethernet/IP requests and one, TALOS-2024-2005 (CVE-2024-34026), a stack-based buffer overflow that could lead to remote code execution.
What's compelling: OpenPLC is pitched as a low-cost automation option for manufacturing and logistics, and one of its three flaws reaches remote code execution - so the same controller class that runs plant-floor processes can be attacked over the network with crafted requests.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2024-34026 CVE-2024-36980 CVE-2024-36981 CVE-2024-38140 CVE-2024-39589 CVE-2024-39590 CVE-2024-45383
Related: Talos discovers Microsoft kernel mode driver vulnerabilities that could lead to SYSTEM privileges; Seven other critical issues disclosed Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026