CVE

CVE-2024-51978

9.8

CVSScritical

Exploitable remotely over the internet · no authentication required.

Description

An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

dcp-j928n-w/bmfc-j1800dw (europe)mfc-j1800dw (usa)mfc-j4340dwemfc-j4345dwxlmfc-j5855dwxl

Updated Sep 18, 2026View on NVD →

S4E scanner

criticalMisconfiguration~10 seconds

CVE-2024-51978 Scanner

CVE-2024-51978 Scanner - Authentication Bypass vulnerability in Brother Printers

Used 2.9k times · 5.9k assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: dcp-j928n-w/b

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →