Overview
CVE-2024-51983 is a significant vulnerability that allows an unauthenticated attacker to crash a targeted device using a malformed WS-Scan SOAP request. The vulnerability affects any device that has the Web Services feature active and listens to HTTP TCP port 80. It exposes systems to potential compromise and data leakage, emphasizing the importance of immediate mitigation.
Vulnerability Summary
CVE ID: CVE-2024-51983
Severity: High (7.5 CVSS score)
Attack Vector: Network
Privileges Required: None
User Interaction: None
Impact: System compromise, possible data leakage, and repeated device crashes
Affected Products
Escape the Surveillance Era
Most apps won’t tell you the truth.
They’re part of the problem.
Phone numbers. Emails. Profiles. Logs.
It’s all fuel for surveillance.
Ameeba Chat gives you a way out.
- • No phone number
- • No email
- • No personal info
- • Anonymous aliases
- • End-to-end encrypted
Chat without a trace.
Product | Affected Versions
[Product Name] | [All versions that run Web Services feature on HTTP TCP port 80]
How the Exploit Works
An attacker initiates this exploit by sending a WS-Scan SOAP request containing an unexpected JobToken value to the target device via the Web Services feature (HTTP TCP port 80). This malformed request causes the device to crash and subsequently reboot. The attacker can repeat these steps indefinitely, causing the device to crash repeatedly, potentially compromising the system and leading to data leakage.
Conceptual Example Code
Here’s a conceptual example of the type of HTTP request that could potentially exploit this vulnerability:
POST /WS_Scan HTTP/1.1
Host: target.example.com
Content-Type: text/xml; charset=utf-8
SOAPAction: "http://schemas.hp.com/imaging/escl/2011/05/03/ScanService/StartScan"
<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope">
<soap:Body>
<StartScan xmlns="http://schemas.hp.com/imaging/escl/2011/05/03">
<JobToken>Unexpected_Value</JobToken>
</StartScan>
</soap:Body>
</soap:Envelope>In this conceptual example, the value “Unexpected_Value” in the `JobToken` element is the unexpected JobToken value that causes the device to crash.
