Scanner Vulnerability Advisory: CVE-2017-9765, CVE-2024-51978-51984, Mitigations

Critical Vulnerability Information Vulnerability Description CVE-2017-9765: Stack buffer overflow may lead to malicious code execution or application crash. CVE-2024-2189: Infinite message loop between servers may cause service disruption. CVE-2024-51978: Risk of authentication bypass. CVE-2024-51979: Static buffer overflow may result in system instability and malicious code execution. CVE-2024-51980: Forced TCP connection may enable unauthorized remote access. CVE-2024-51981: Unauthorized HTTP requests may be forwarded to other hosts within the local network. CVE-2024-51982: Device crash triggered by external input may lead to service disruption and system instability. CVE-2024-51983: External/internal device crash may cause service disruption and system instability. CVE-2024-51984: Printer data exposure via passbook attack. Remediation Steps 1. Check if firmware updates are available for affected scanners. 2. If updates are available, download and install the latest firmware using the firmware update tool. 3. After installation, change the default administrator password via the web management interface. Mitigation Measures CVE-2017-9765: Disable WSD functionality. CVE-2024-2189: Disable TFTP. CVE-2024-51978: Change the default administrator password. CVE-2024-51979: Change the default administrator password. CVE-2024-51980: Disable WSD functionality. CVE-2024-51981: Disable WSD functionality. CVE-2024-51982: No mitigation available; install firmware update. CVE-2024-51983: Disable WSD functionality. CVE-2024-51984: Change the default administrator password. Acknowledgments Yeping Plan of CISPA, Germany reported the CVE-2024-2189 vulnerability. Stephen Fewer, Principal Security Researcher at Rapid7, USA reported vulnerabilities CVE-2024-51978 through CVE-2024-51984.

Goal Reached Thanks to every supporter — we hit 100%!

Scanner Vulnerability Advisory: CVE-2017-9765, CVE-2024-51978-51984, Mitigations