← Back

CVE-2024-51978

nvd nistnuclei
Published: Jun 25, 2025Modified: Jun 17, 2026Deferred

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: cve@rapid7.com (Secondary)

Description

An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request.

Related CWEs

CWE-1391
Use of Weak Credentials
The product uses weak credentials (such as a default key or hard-coded password) that can be calculated, derived, reused, or guessed by an attacker.

References (14)

Source: cve@rapid7.com
Source: cve@rapid7.com
Source: cve@rapid7.com
Source: cve@rapid7.com
Source: cve@rapid7.com
Source: cve@rapid7.com
Source: cve@rapid7.com
Source: cve@rapid7.com
Source: cve@rapid7.com
Source: cve@rapid7.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.