CVE-2024-51983

—

CVSS 3.1

7.5 high

EPSS

10%p95

Published

Jun 25, 2025 (Jun 25, 2025)

Modified

Jun 17, 2026

Description

An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device.

Weakness: CWE-1286
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (9.5%)

In the news0 stories

No ingested article mentions this CVE yet.