CVE-2024-51978
Last modified
CVE-2024-51978 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request.. EPSS estimates a 23.64% chance of exploitation in the next 30 days.
Description
An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-51978?
How severe is CVE-2024-51978?
How do I fix CVE-2024-51978?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-51961There is a local file inclusion vulnerability in ArcGIS Serv…7.5
- CVE-2024-51962A SQL injection vulnerability in ArcGIS Server allows an EDI…8.7
- CVE-2024-51963There is a stored Cross-site Scripting vulnerability in ArcG…4.8
- CVE-2024-51966There is a path traversal vulnerability in ESRI ArcGIS Serve…4.9
- CVE-2024-5197There exists interger overflows in libvpx in versions prior …9.1
- CVE-2024-51977An unauthenticated attacker who can access either the HTTP s…5.3
- CVE-2024-51979An authenticated attacker may trigger a stack based buffer o…7.2
- CVE-2024-5198OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivi…3.3
- CVE-2024-51980An unauthenticated attacker may perform a limited server sid…5.3
- CVE-2024-51981An unauthenticated attacker may perform a blind server side …5.3
- CVE-2024-51982An unauthenticated attacker who can connect to TCP port 9100…7.5
- CVE-2024-51983An unauthenticated attacker who can connect to the Web Servi…7.5
Are you affected by CVE-2024-51978?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST