CVE-2024-51983
Last modified
CVE-2024-51983 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device.. EPSS estimates a 7.47% chance of exploitation in the next 30 days.
Description
An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-51983?
How severe is CVE-2024-51983?
How do I fix CVE-2024-51983?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-51978An unauthenticated attacker who knows the target device's se…9.8
- CVE-2024-51979An authenticated attacker may trigger a stack based buffer o…7.2
- CVE-2024-5198OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivi…3.3
- CVE-2024-51980An unauthenticated attacker may perform a limited server sid…5.3
- CVE-2024-51981An unauthenticated attacker may perform a blind server side …5.3
- CVE-2024-51982An unauthenticated attacker who can connect to TCP port 9100…7.5
- CVE-2024-51984An authenticated attacker can reconfigure the target device …6.8
- CVE-2024-51987Duende.AccessTokenManagement.OpenIdConnect is a set of .NET …5.4
- CVE-2024-51988RabbitMQ is a feature rich, multi-protocol messaging and str…6.5
- CVE-2024-51989Password Pusher is an open source application to communicate…7.1
- CVE-2024-5199The Spotify Play Button WordPress plugin through 1.0 does no…5.4
- CVE-2024-51990jj, or Jujutsu, is a Git-compatible VCS written in rust. In …9.3
Are you affected by CVE-2024-51983?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST