CVE-2024-51983

HIGH

Web Services < unknown - DoS

Title source: llm

Description

An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device.

References (9)

Scores

CVSS v3 7.5
EPSS 0.0080
EPSS Percentile 73.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-1286
Status draft

Timeline

Published Jun 25, 2025
Tracked Since Feb 18, 2026