Detections
Analytics
CVE-2024-51983
high
Description
An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device.
References
https://www.toshibatec.com/information/20250625_02.html
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007
https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf
https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html
https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000
https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000