What is the CVSS score of EUVD-2024-54698?

EUVD-2024-54698 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 48.3%.

Is there a public PoC exploit available for EUVD-2024-54698?

Yes, a public proof-of-concept exploit is available for EUVD-2024-54698. Prioritise patching immediately. EPSS: 48.3%.

How to fix or mitigate EUVD-2024-54698?

Within 24 hours: Inventory all affected printer models and isolate critical devices to segmented networks if possible; disable remote access protocols (HTTP/HTTPS/IPP/SNMP) where feasible. Within 7 days: Implement network-level controls (firewall rules, WAF policies) to restrict unauthenticated access to printer management interfaces and change all default credentials manually via secure, local access only. Within 30 days: Monitor vendor communications for patch availability; develop printer hardening baseline; conduct audit of print device access logs for unauthorized login attempts.

HP EUVD-2024-54698

| CVE-2024-51978 CRITICAL

Use of Weak Credentials (CWE-1391)

2025-06-25 cve@rapid7.com

Authentication Bypass Information Disclosure HP

9.8

CVSS 3.1 · NVD

View

Vulnerability Assessment

Weakness	CWE CWE-1391 OWASP Top 10:2025 A07:2025 - Authentication Failures ASVS 5.0 V6 - Authentication Strong credential management
Impact	CVSS 9.8, EPSS 48.3%, PoC available. This is a two-step attack chain: discover serial number, then generate password. Both steps are unauthenticated. Devices with default passwords that aren't truly random are common in printers, IoT, and network devices.
Exploit ScenarioDerived	An attacker sends HTTP/SNMP requests to discover the device serial number. They run the serial number through the password generation algorithm to produce the default admin password. They log in with full admin privileges, modifying device configuration and accessing stored data.

Emergency Immediate action required. Why: CRITICAL + EPSS > 30%, no patch available.

No patch listed yet 48.3% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 15, 2026

Certain devices expose serial numbers via HTTP/HTTPS/IPP and SNMP that can be used to generate the default administrator password. An unauthenticated attacker who discovers the serial number can calculate the admin password and gain full administrative control of the device without brute force.

Earlier versions of this analysis (1)

v1 Mar 15, 2026 - 23:19 CVSS 9.8

Predictable admin password generation from discoverable serial numbers enables unauthenticated device takeover.

RemediationAI

Change the default administrator password immediately. Restrict SNMP and management interface access. Disable information disclosure endpoints. Implement network segmentation for IoT/printer devices.

Affected VersionsENISA

TD-4520DN 0 ≤1.38

HL-L2370DNR 0 ≤1.74(ZE)

HL-T4000DW 0 ≤N

MFC-J890DW 0 ≤T

DCP-L5500DN 0 ≤ZZ

TJ-4422TN 0 ≤B1.17.S68

DCP-B7620DWB 0 ≤1.20(J)

DCP-T820DW 0 ≤1.20(L)

PJ-773 0 ≤1.27

MFC-L5710DW 0 ≤1.12(H)

DCP-L2600DW 0 ≤1.09(C)

MFC-J5330DW 0 ≤W

MFC-L5915DW 0 ≤1.18(J)

HL-J6100DW 0 ≤S

SP-1 (for Japan) 0 ≤1.03(A)

MFC-J5930DW 0 ≤Y

DCP-B7650DW 0 ≤1.12(E)

MFC-J6997CDW 0 ≤T

HL-L2370DW 0 ≤1.74(ZE)

HL-B2188DW 0 ≤1.13(E)

TD-2130N 0 ≤1.13

MFC-J6580CDW 0 ≤R

MFC-J3930DW 0 ≤Z

ADS-2700We 0 ≤P(2.28)

HL-L6415DW 0 ≤1.16(G)

DCP-L2540DNR 0 ≤Y

MFC-J5340DWE 0 ≤1.20(L)

HL-L2400DW 0 ≤1.15(J)

TD-2320DSA 0 ≤1.10

HL-L3290CDW 0 ≤ZA

MFC-J739DWN 0 ≤1.14(M)

HL-L6410DN 0 ≤1.16(G)

MFC-J998DN 0 ≤M

MFC-J7100CDW 0 ≤1.18(L)

MFC-L3768CDW 0 ≤1.19(M)

MFC-T925DW 0 ≤1.23(N)

DCP-B7530DN 0 ≤V

DCP-T710W 0 ≤Q

RJ-2140 0 ≤1.10

HL-L3280CDW 0 ≤1.15(L)

DCP-J987N-B 0 ≤F

HL-B2080DW 0 ≤1.74(ZE)

MFC-L5717DW 0 ≤1.18(J)

DCP-T725DW 0 ≤1.20(L)

MFC-J5345DW 0 ≤1.20(L)

MFC-L3755CDW 0 ≤1.19(M)

MFC-J739DN 0 ≤1.14(M)

MFC-L2740DW 0 ≤U

DCP-L2560DW 0 ≤W

DCP-L2550DNR 0 ≤ZC

DCP-L2548DW 0 ≤1.16(F)

MFC-L6915DN 0 ≤1.18(J)

MFC-L2700DW 0 ≤Y

FAX-L2700DN 0 ≤R

MFC-J4540N 0 ≤1.11(G)

MFC-L2817DW 0 ≤1.14(H)

HL-L6200DWT 0 ≤1.82(ZG)

DCP-L5518DN 0 ≤1.18(J)

DCP-1623WR 0 ≤ZB

HL-L2360DNR 0 ≤1.36(Z)

DCP-J915N 0 ≤1.03(B)

DCP-C421W 0 ≤1.04(D)

MFC-J939DN 0 ≤1.13(L)

QL-820NWB 0 ≤1.30

DCP-L3550CDW 0 ≤ZE

RJ-2035B 0 ≤B1.00.Q66

TD-2350D 0 ≤1.10

MFC-J5335DW 0 ≤W

MFC-T910DW 0 ≤Q

MFC-J2730DW 0 ≤Y

MFC-J7500CDW 0 ≤1.38(L)

DCP-L2550DW 0 ≤M

PT-E850TKW (for China) 0 ≤1.82

MFC-L5702DW 0 ≤ZZ

MFC-8530DN 0 ≤ZZ

DCP-L5512DN 0 ≤1.18(J)

MFC-L5755DW 0 ≤ZP

HL-L2305W 0 ≤1.25(W)

HL-1212W 0 ≤1.22(T)

HL-2590DN 0 ≤1.74(ZE)

HL-L5228DW 0 ≤1.12(F)

MFC-L3740CDW 0 ≤1.19(M)

HL-L2385DW 0 ≤1.74(ZE)

DCP-B7548W 0 ≤1.16(F)

MFC-L2712DN 0 ≤ZC

DCP-J1700DW 0 ≤1.13(H)

DCP-T510W(for China) 0 ≤N

MFC-J4335DW(XL) 0 ≤1.38(M)

MFC-L2886DW 0 ≤1.14(H)

HL-L6300DWT 0 ≤1.95(ZH)

DCP-J981N 0 ≤Y

DCP-L2605DW 0 ≤1.20(J)

MFC-L6720DW 0 ≤1.18(J)

PT-P750W 0 ≤1.18

QL-810W 0 ≤1.30

DCP-J988N 0 ≤Q

DCP-L1630W 0 ≤1.05(B)

MFC-L2705DW 0 ≤W

DCP-L5652DN 0 ≤ZZ

MFC-L9610CDN 0 ≤1.22(S)

MFC-L2750DWR 0 ≤ZC

DCP-T730DW 0 ≤1.01(A)

PT-P950NW 0 ≤1.31

DCP-J1200WE 0 ≤1.15(L)

MFC-L2750DW 0 ≤R

HL-5595DN 0 ≤1.82(ZG)

HL-L1230W 0 ≤1.04(C)

MFC-J4440N 0 ≤1.11(G)

MFC-J898N 0 ≤X

QL-820NWBc 0 ≤2.04

HL-L6450DW 0 ≤1.95(ZH)

MFC-J3940DW 0 ≤1.19(M)

DCP-T735DW 0 ≤1.01(A)

MFC-7889DW 0 ≤S

HL-L6300DW 0 ≤1.95(ZH)

HL-L9430CDN 0 ≤1.23(Q)

HL-L2420DW 0 ≤1.15(J)

HL-B2100D 0 ≤1.15(J)

MFC-J4940DN 0 ≤1.11(G)

MFC-L2770DW 0 ≤ZC

MFC-L6900DW 0 ≤ZP

MFC-T4500DW 0 ≤P

MFC-1911NW 0 ≤V

DCP-J928N-WB 0 ≤1.03(B)

MFC-J491DW 0 ≤Q

MFC-L2885DW 0 ≤1.14(H)

MFC-L2750DWXL 0 ≤ZC

DCP-T225 0 ≤1.27(K)

HL-1212WR 0 ≤1.22(T)

HL-L6310DW 0 ≤1.10(F)

HL-L5218DN 0 ≤1.12(F)

DCP-1612WR 0 ≤ZB

MFC-L2710DN 0 ≤ZC

HL-L6400DWG 0 ≤1.40(R)

DCP-L5602DN 0 ≤ZZ

HL-L5050DN 0 ≤1.82(ZG)

MFC-J2340DW 0 ≤1.20(L)

DCP-L2600D 0 ≤1.20(J)

HL-L1232W 0 ≤1.04(C)

MFC-L6700DW 0 ≤ZZ

DCP-J526N 0 ≤1.11(K)

MFC-J6995CDW 0 ≤S

MFC-L6750DW 0 ≤ZZ

TJ-4620TN 0 ≤B1.17.S68

MFC-L2700DW(ASA) 0 ≤W

MFC-7895DW 0 ≤R

MFC-EX915DW 0 ≤1.18(J)

MFC-L2802DN 0 ≤1.20(J)

HL-L2390DW 0 ≤ZC

ADS-2800W 0 ≤T

HL-B2180DW 0 ≤1.15(J)

MFC-J5955DW 0 ≤1.25(L)

HL-L6210DW 0 ≤1.14(H)

HL-L2464DW 0 ≤1.20(J)

DCP-B7628DW 0 ≤1.16(F)

DCP-J978N-W/B 0 ≤Y

MFC-J6980CDW 0 ≤S

NFC-EX670 0 ≤1.22(S)

DCP-L3568CDW 0 ≤1.19(M)

DCP-T439W 0 ≤1.02(B)

DCP-1612WE 0 ≤ZB

HL-1222WE 0 ≤1.22(T)

DCP-L3515CDW 0 ≤1.16(L)

MFC-L5700DN 0 ≤ZZ

DCP-L2551DW 0 ≤ZC

MFC-J6940DW 0 ≤1.19(M)

DS/MDS-940DW 0 ≤G(1.7)

TJ-4021TN 0 ≤B2.12.S83

HL-L2375DWR 0 ≤1.74(ZE)

MFC-J4340DW(XL) 0 ≤1.38(M)

MFC-J5730DW 0 ≤Y

MFC-L2700DWR 0 ≤Y

MFC-J6555DW XL 0 ≤1.19(H)

DCP-1618W 0 ≤R

PT-E550W (for China) 0 ≤1.18

MFC-L5902DW 0 ≤ZZ

MFC-L2685DW 0 ≤Y

DCP-L2535DW 0 ≤M

DCP-B7640DWB 0 ≤1.20(J)

MFC-J6540DW 0 ≤1.18(L)

HL-B2158W 0 ≤1.13(E)

MFC-B7715DW 0 ≤ZC

DCP-L5610DN 0 ≤1.18(J)

MFC-L2806DW 0 ≤1.20(J)

DCP-7195DW 0 ≤R

HL-3160CDW 0 ≤1.39(ZA)

HL-L3220CDW 0 ≤1.06(F)

HL-JF1 0 ≤1.16(H)

HL-L6400DWT 0 ≤1.95(ZH)

MFC-J805DW XL 0 ≤J

TJ-4121TNR 0 ≤B2.12.S83

HL-L2350DW 0 ≤1.74(ZE)

MFC-L2900DW 0 ≤1.03(C)

HL-L3230CDW 0 ≤1.39(ZA)

TD-2350DSA 0 ≤1.10

MFC-J497DW 0 ≤Q

DCP-L2532DW 0 ≤ZC

MFC-L2703DW 0 ≤W

MFC-L5750DW 0 ≤ZZ

DCP-T720DW 0 ≤1.20(L)

ADS-4900W 0 ≤P(2.28)

HL-EX470W 0 ≤1.23(Q)

MFC-L2715DW(for Tiwan, Koria) 0 ≤V

RJ-4250WB 0 ≤1.41

MFC-L3750CDW 0 ≤ZE

MFC-L2880DWXL 0 ≤1.14(H)

MFC-J815DW XL 0 ≤J

MFC-J6535DW 0 ≤Z

HL-L2865DW 0 ≤1.15(J)

DCP-J1100DW 0 ≤P

HL-L6202DW 0 ≤1.82(ZG)

DCP-J774DW 0 ≤T

DCP-B7640DW 0 ≤1.16(F)

MFC-L2717DW 0 ≤ZC

MFC-L2730DWR 0 ≤ZC

DCP-T710W(for China) 0 ≤N

MFC-J7300CDW 0 ≤1.19(M)

DCP-L2640DN 0 ≤1.20(J)

MFC-J3530DW 0 ≤W

MFC-L6820DW 0 ≤1.15(H)

HL-L9310CDW 0 ≤1.68(ZG)

MFC-L2861DW 0 ≤1.14(H)

TJ-4010TN 0 ≤B2.12.S83

HL-L8240CDW 0 ≤1.15(L)

MFC-J6983CDW 0 ≤N

DCP-T238 0 ≤1.01(A)

MFC-T810W(for China) 0 ≤N

ADS-2700W 0 ≤M(4.28)

MFC-J926N-WB 0 ≤1.11(J)

MFC-L2980DW 0 ≤1.03(C)

HL-L2475DW 0 ≤1.20(J)

MFC-J939DWN 0 ≤1.13(L)

RJ-3150Ai 0 ≤1.08

MFC-J6583CDW 0 ≤K

HL-1223WE 0 ≤1.22(T)

DCP-L3555CDW 0 ≤1.19(M)

HL-L2357DW 0 ≤1.74(ZE)

DCP-L2628DW 0 ≤1.16(F)

DCP-7090DW 0 ≤M

HL-L3300CDW 0 ≤1.16(L)

DCP-B7620DW 0 ≤1.20(J)

HL-L2375DW 0 ≤1.74(ZE)

MFC-L2862DW 0 ≤1.14(H)

MFC-J1215W 0 ≤1.15(L)

MFC-L9577CDW 0 ≤ZM

DCP-9030CDN 0 ≤ZE

MFC-L8610CDW 0 ≤ZK

TD-2350DF 0 ≤1.10

MFC-L2720DWR 0 ≤X

MFC-L6710DW 0 ≤1.18(J)

MFC-T920DW 0 ≤1.23(N)

MFC-L2922DW 0 ≤1.12(E)

HL-L2447DW 0 ≤1.15(J)

HL-L2460DWXL 0 ≤1.15(J)

DCP-T525W 0 ≤1.21(M)

DCP-L1848W 0 ≤1.06(E)

TJ-TJ-4522TN 0 ≤B1.17.S68

DCP-J4543N 0 ≤1.03(B)

MFC-B7720DN 0 ≤V

HL-L8260CDN 0 ≤1.65(ZH)

DCP-L2550DW(TWN) 0 ≤V

MFC-L9635CDN 0 ≤1.22(S)

MFC-J893N 0 ≤X

MFC-1910WE 0 ≤V

RJ-3050Ai 0 ≤1.08

DCP-L5510DW 0 ≤1.18(J)

MFC-J6945DW 0 ≤T

DCP-L2508DW 0 ≤1.16(F)

DCP-T825DW 0 ≤1.20(L)

PT-E550W (for Koria) 0 ≤1.18

MFC-9350CDW 0 ≤ZE

PT-E550W (for US, EU) 0 ≤1.31

QL-810Wc 0 ≤2.04

ADS-4700W 0 ≤P(2.28)

HL-B2150W 0 ≤1.15(J)

MFC-J6530DW 0 ≤W

HL-L6412DW 0 ≤1.16(G)

HL-L5200DW 0 ≤1.82(ZG)

DCP-T830DW 0 ≤1.03(A)

HL-J7010CDW 0 ≤1.29(J)

bizhub 4000i 0 ≤1.28

MFC-J998DWN 0 ≤M

MFC-J904N 0 ≤1.11(K)

DCP-L2648DW 0 ≤1.16(F)

MFC-J6955DW 0 ≤1.38(L)

HL-2569DW 0 ≤1.36(Z)

DCP-T435W 0 ≤1.02(B)

DCP-B7558W 0 ≤1.16(F)

TD-4750TNWB 0 ≤V1.04.S72

HL-J6010DW 0 ≤1.29(J)

DCP-L2550DN 0 ≤ZC

PT-E800W 0 ≤1.59

TD-4420TN 0 ≤V1.04.S97

MFC-L2920DW 0 ≤1.12(E)

DCP-1615NW 0 ≤S

HL-L2370DWXL 0 ≤1.74(ZE)

DCP-L2627DW 0 ≤1.20(J)

HL-L3220CWE 0 ≤1.06(F)

MFC-J738DN 0 ≤M

TD-4650TNWBR 0 ≤V1.04.S72

PT-E850TKW (for Koria) 0 ≤1.58

DCP-L8410CDW 0 ≤ZK

MFC-L3780CDW 0 ≤1.12(J)

MFC-L2720DW 0 ≤X

MFC-1911W 0 ≤V

DCP-T226 0 ≤1.27(K)

QL-1110NWB 0 ≤1.15

HL-L3295CDW 0 ≤1.15(L)

MFC-L2732DW 0 ≤ZC

PT-E550W (for Vietnum) 0 ≤1.17

MFC-L2720DN 0 ≤T

MFC-L9570CDW 0 ≤ZM

MFC-L2690DW 0 ≤ZC

TJ-4121TN 0 ≤B2.12.S83

HL-L5215DW 0 ≤1.14(H)

MFC-L2802DW 0 ≤1.20(J)

HL-L2440DW 0 ≤1.15(J)

DCP-L2640DW 0 ≤1.20(J)

MFC-L6915DW 0 ≤1.18(J)

MFC-L2710DWR 0 ≤ZC

HL-L2376DW 0 ≤1.74(ZE)

MFC-L9670CDN 0 ≤1.22(S)

TD-2320DF 0 ≤1.10

MFC-L6912DW 0 ≤1.18(J)

MFC-J1800DW 0 ≤1.02(B)

DCP-L5660DN 0 ≤1.18(J)

DCP-L3560CDW 0 ≤1.19(M)

MFC-L6902DW 0 ≤ZZ

MFC-L2716DW 0 ≤ZC

HL-L5215DN 0 ≤1.14(H)

DCP-T230 0 ≤1.01(A)

MFC-L3765CDW 0 ≤1.19(M)

HL-L8230CDW 0 ≤1.15(L)

MFC-1916NW 0 ≤V

MFC-L9630CDN 0 ≤1.22(S)

RJ-3150 0 ≤1.19

DCP-J1140DW 0 ≤1.13(H)

DCP-B7638DN 0 ≤1.16(F)

DCP-T520W 0 ≤1.21(M)

MFC-L2751DW 0 ≤ZC

MFC-L3770CDW 0 ≤ZA

MFC-J805DW 0 ≤J

HL-L2360DN 0 ≤1.36(Z)

MFC-L6915DN CSP 0 ≤1.18(J)

ADS-3600W 0 ≤T

HL-1223WR 0 ≤1.22(T)

HL-L2325DW 0 ≤1.74(ZE)

TD-2350DFSA 0 ≤1.10

MFC-J1012DW 0 ≤1.15(K)

DCP-1617NW 0 ≤S

HL-B2050DN 0 ≤1.74(ZE)

ADS-1350W 0 ≤C(1.06)

DCP-J577N 0 ≤W

HL-L2395DW 0 ≤ZC

MFC-J2330DW 0 ≤W

MFC-L5710DN 0 ≤1.18(J)

RJ-2150 0 ≤1.10

MFC-J7700CDW 0 ≤1.16(G)

HL-B2100DB 0 ≤1.15(J)

HL-1210WR 0 ≤1.22(T)

MFC-J5845DW(XL) 0 ≤N

MFC-L2860DWE 0 ≤1.14(H)

HL-L3230CDN 0 ≤1.39(ZA)

MFC-L2860DW 0 ≤1.08(C)

MFC-J6935DW 0 ≤Z

HL-L2365DW 0 ≤1.36(Z)

DCP-J973N-W/B 0 ≤Y

MFC-L5850DW 0 ≤ZZ

TD-4650TNWB 0 ≤V1.04.S72

MFC-J895DW 0 ≤T

HL-L6250DN 0 ≤1.82(ZG)

DCP-L5662DN 0 ≤1.18(J)

ADS-2400N 0 ≤T

PJ-883 0 ≤1.07

MFC-L3730CDN 0 ≤ZE

DCP-1610W 0 ≤ZB

HL-L2351DW 0 ≤1.74(ZE)

MFC-L6810DW 0 ≤1.18(J)

MFC-J4345DW XL 0 ≤1.38(M)

HL-L2340DW 0 ≤1.27(W)

HL-L2460DN 0 ≤1.15(J)

DCP-B7658DW 0 ≤1.12(E)

MFC-J5945DW 0 ≤T

TJ-4120TN 0 ≤B2.12.S83

DCP-L3510CDW 0 ≤ZA

DCP-1610WR 0 ≤ZB

DCP-L2520DWR 0 ≤X

HL-L9470CDN 0 ≤1.23(Q)

HL-L5210DW 0 ≤1.12(F)

MFC-1910W 0 ≤V

MFC-7880DN 0 ≤S

HL-1210W 0 ≤1.22(T)

MFC-J1170DW 0 ≤1.10(G)

HL-L2386DW 0 ≤1.74(ZE)

bizhub 4020i 0 ≤U2406280431 (Ver R)

MFC-L2960DW 0 ≤1.03(C)

ADS-3300W 0 ≤P(2.28)

MFC-L3760CDW 0 ≤1.19(M)

DCP-J1203N 0 ≤1.02(B)

DCP-T420W 0 ≤1.27(K)

DCP-L2665DW 0 ≤1.14(H)

HL-L2372DN 0 ≤1.74(ZE)

HL-L2371DN 0 ≤1.74(ZE)

TD-2120N 0 ≤1.25

DCP-J972N 0 ≤Y

PT-P900W 0 ≤1.31

HL-L8360CDWT 0 ≤1.68(ZG)

DCP-T436W 0 ≤1.02(B)

DCP-J982N-W/B 0 ≤Y

ADS-1800W 0 ≤C(1.06)

MFC-J6947DW 0 ≤T

HL-1212WE 0 ≤1.22(T)

DCP-J572DW 0 ≤P

RJ-3035B 0 ≤B1.00.Q66

MFC-4340DWE 0 ≤1.38(M)

MFC-9150CDN 0 ≤ZE

HL-L8245CDW 0 ≤1.15(L)

DCP-1616NW 0 ≤S

DCP-L2622DW 0 ≤1.20(J)

HL-L5202DW 0 ≤1.82(ZG)

DCP-J914N 0 ≤1.11(J)

PT-D800W 0 ≤1.59

MFC-L2700DN 0 ≤Y

DCP-J1800N 0 ≤1.14(H)

MFC-J4540DW(XL) 0 ≤1.38(M)

HL-L6210DWT 0 ≤1.14(H)

HL-L9410CDN 0 ≤1.23(Q)

MFC-L2710DNR 0 ≤ZC

MFC-L8900CDW 0 ≤ZM

DCP-L2680DW 0 ≤1.14(H)

HL-L2340DWR 0 ≤1.27(W)

MFC-L6800DW 0 ≤ZZ

MFC-J3540DW 0 ≤1.18(L)

DCP-1612W 0 ≤ZB

MFC-L5802DW 0 ≤ZZ

MFC-EX670W 0 ≤1.22(S)

MFC-J6730DW 0 ≤W

DCP-L2627DWE 0 ≤1.20(J)

TJ-4020TN 0 ≤B2.12.S83

DCP-B7600D 0 ≤1.20(J)

DCP-T535DW 0 ≤1.01(A)

TD-4520TN 0 ≤V1.04.S97

DCP-B7535DW 0 ≤V

HL-1210WE 0 ≤1.22(T)

HL-L6415DWT 0 ≤1.16(G)

MFC-L6702DW 0 ≤ZZ

HL-1218W 0 ≤1.22(T)

MFC-J7600CDW 0 ≤1.38(L)

MFC-L2740DWR 0 ≤W

TD-4550DNWB 0 ≤1.38

TJ-4420TN 0 ≤B1.17.S68

PT-E550W (for Thailand) 0 ≤1.16

HL-L2461DN 0 ≤1.15(J)

MFC-L2707DW 0 ≤W

HL-L2350DWR 0 ≤1.74(ZE)

MFC-L6900DWG 0 ≤U

HL-L5210DN 0 ≤1.12(F)

MFC-L2800DW 0 ≤1.20(J)

MFC-L6970DW 0 ≤ZZ

HL-L6415DN 0 ≤1.16(G)

HL-5590DN 0 ≤1.82(ZG)

HL-L6418DW 0 ≤1.16(G)

FAX-L2800DW 0 ≤1.09(C)

DCP-J528N 0 ≤1.04(C)

DCP-1623WE 0 ≤ZB

MFC-J6957DW 0 ≤1.38(L)

ADS-3000N 0 ≤T

DCP-J1800DW 0 ≤1.13(H)

DCP-L3517CDW 0 ≤ZA

HL-L1808W 0 ≤1.04(C)

RJ-3250WB 0 ≤1.24

MFC-L8395CDW 0 ≤1.19(M)

PT-E850TKW (for Asia pacific, EU, US) 0 ≤1.83

e-STUDIO301DN 0 ≤M2309191505

DCP-L2541DW 0 ≤Y

MFC-1915W 0 ≤V

DCP-B7578DW 0 ≤1.16(F)

MFC-L8390CDW 0 ≤1.19(M)

MFC-L3735CDN 0 ≤ZE

MFC-L2807DW 0 ≤1.14(H)

PT-E850TKW (for Thailand) 0 ≤1.58

MFC-L2701DW 0 ≤W

DCP-L2531DW 0 ≤ZC

MFC-L8610CDW(for Japan) 0 ≤ZD

HL-L3210CW 0 ≤1.39(ZA)

MFC-8540DN 0 ≤ZZ

DCP-J582N 0 ≤W

MFC-J5740DW 0 ≤1.16(J)

MFC-J1010DW 0 ≤1.15(K)

TJ-4520TN 0 ≤B1.17.S68

ADS-1250W 0 ≤R(3.75)

MFC-L2712DW 0 ≤ZC

TD-4420DN 0 ≤1.38

DCP-T536DW 0 ≤1.01(A)

DCP-J1200N 0 ≤1.15(L)

PT-E850TKW (for Tiwan) 0 ≤1.59

MFC-J6555DW 0 ≤1.19(H)

SP-1 0 ≤1.06(C)

MFC-L2835DW 0 ≤1.20(J)

HL-L6400DW 0 ≤1.95(ZH)

MFC-L8690CDW 0 ≤ZK

DCP-L2551DN 0 ≤ZC

MFC-L5700DW 0 ≤ZZ

HL-2560DN 0 ≤1.36(Z)

HL-L3240CDW 0 ≤1.06(F)

MFC-L8340CDW 0 ≤1.19(M)

e-STUDIO302DNF 0 ≤M2309191611

HL-L6200DW 0 ≤1.82(ZG)

DCP-L5510DN 0 ≤1.18(J)

MFC-J995DW XL 0 ≤P

DCP-L3551CDW 0 ≤ZA

DCP-L2620DW 0 ≤1.20(J)

PT-P900Wc 0 ≤2.04

DCP-J772DW 0 ≤T

MFC-B7810DWB 0 ≤1.20(J)

HL-EX415DW 0 ≤1.16(G)

HL-L2480DW 0 ≤1.14(H)

MFC-L6950DW 0 ≤ZZ

DCP-J587N 0 ≤F

DCP-L2660DW 0 ≤1.08(C)

MFC-L5800DW 0 ≤ZZ

HL-L5212DW 0 ≤1.14(H)

DCP-L6600DW 0 ≤ZZ

HL-J6000CDW 0 ≤S

TD-2320D 0 ≤1.10

TD-2135N 0 ≤2.19

HL-L5210DWT 0 ≤1.14(H)

DCP-L2530DWR 0 ≤ZC

MFC-B7810DW 0 ≤1.20(J)

MFC-L2765DW 0 ≤1.20(J)

MFC-L2827DWXL 0 ≤1.20(J)

MFC-L5715DN 0 ≤1.18(J)

MFC-B7800DN 0 ≤1.20(J)

MFC-L3710CDW 0 ≤ZE

DCP-T835DW 0 ≤1.03(A)

MFC-L6910DN 0 ≤1.18(J)

DCP-B7520DW 0 ≤V

DCP-T425W 0 ≤1.27(K)

PT-E550W (for Russia) 0 ≤1.17

ADS-4300N 0 ≤P(2.28)

TD-2125N 0 ≤2.19

MFC-L2880DW 0 ≤1.08(C)

NFC-J903N 0 ≤X

DCP-B7600DB 0 ≤1.20(J)

MFC-T810W 0 ≤Q

TD-2310D 0 ≤1.10

MFC-J738DWN 0 ≤M

HL-L2465DW 0 ≤1.20(J)

MFC-J1500N 0 ≤P

DS-740D 0 ≤F(1.6)

DCP-1622WE 0 ≤ZB

DCP-L2625DW 0 ≤1.20(J)

MFC-L2900DWXL 0 ≤1.03(C)

HL-1211W 0 ≤1.22(T)

DCP-L2560DWR 0 ≤W

DCP-L2540DW 0 ≤T

bizhub 5020i 0 ≤U2406280431 (Ver R)

MFC-7890DN 0 ≤V

PT-E850TKW (for UAE) 0 ≤1.58

HL-B2181DW 0 ≤1.15(J)

HL-L6217DW 0 ≤1.14(H)

MFC-J5855DW 0 ≤1.25(J)

HL-L1238W 0 ≤1.04(C)

HL-L6250DW 0 ≤1.82(ZG)

HL-L5200DWT 0 ≤1.82(ZG)

DCP-L3520CDW 0 ≤1.16(L)

MFC-L3740CDWE 0 ≤1.19(M)

DCP-7180DN 0 ≤R

HL-3190CDW 0 ≤1.36(ZA)

MFC-J5855DW XL 0 ≤1.25(J)

MFC-J4443N 0 ≤1.03(B)

HL-L2405W 0 ≤1.15(J)

HL-L3220CW 0 ≤1.06(F)

DCP-T430W 0 ≤1.02(B)

MFC-L3720CDW 0 ≤1.19(M)

MFC-J1605DN 0 ≤K

MFC-L2710DW 0 ≤ZC

HL-L2352DW 0 ≤1.74(ZE)

QL-1110NWBc 0 ≤2.13

MFC-J6740DW 0 ≤1.18(L)

MFC-L2680W 0 ≤Y

DCP-J987N-W 0 ≤F

HL-L2365DWR 0 ≤1.36(Z)

QL-1115NWB 0 ≤1.15

HL-B2180DWB 0 ≤1.15(J)

MFC-J6999CDW 0 ≤T

ADS-1700W 0 ≤R(3.75)

FAX-L2710DN 0 ≤R

TJ-4021TNR 0 ≤B2.12.S83

RJ-2050 0 ≤1.10

MFC-J5630CDW 0 ≤L

MFC-J5800CDW 0 ≤1.25(J)

MFC-L5900DW 0 ≤ZZ

VC-500W 0 ≤2022071301

MFC-J6930DW 0 ≤Z

MFC-T930DW 0 ≤1.03(B)

MFC-J905N 0 ≤1.04(C)

HL-L3215CW 0 ≤1.06(F)

HL-L2460DW 0 ≤1.15(J)

MFC-L2730DW 0 ≤ZC

TJ-4005DN 0 ≤B2.12.S83

DCP-L2540DN 0 ≤Y

DCP-7190DN 0 ≤V

DCP-T220 0 ≤1.27(K)

MFC-L2713DW 0 ≤ZC

HL-L2360DW 0 ≤1.36(Z)

DCP-L2627DWXL 0 ≤1.20(J)

HL-L8360CDW 0 ≤1.68(ZG)

HL-L5100DNT 0 ≤1.82(ZG)

DCP-L1638W 0 ≤1.06(E)

MFC-EX910 0 ≤1.18(J)

MFC-J5830DW 0 ≤Y

DCP-T530DW 0 ≤1.01(A)

MFC-J4440DW 0 ≤1.38(M)

MFC-L2827DW 0 ≤1.20(J)

MFC-J6540DWE 0 ≤1.18(L)

PT-E550W (for Tiwan, Hongkong) 0 ≤1.15

MFC-J4535DW(XL) 0 ≤1.38(M)

DCP-B7608W 0 ≤1.16(F)

DCP-T426W 0 ≤1.27(K)

DCP-L2518DW 0 ≤1.16(F)

HL-L5100DN 0 ≤1.82(ZG)

DCP-L2537DW 0 ≤ZC

DCP-1610WE 0 ≤ZB

MFC-L5728DW 0 ≤1.18(J)

TD-4750TNWBR 0 ≤V1.04.S72

HL-L2467DW 0 ≤1.15(J)

DCP-J1050DW 0 ≤1.14(J)

MFC-L2820DWXL 0 ≤1.14(H)

ADS-4500W 0 ≤P(2.28)

bizhub 5000i 0 ≤1.32

HL-L3288CDW 0 ≤1.15(L)

DCP-L5600DN 0 ≤ZZ

HL-L3270CDW 0 ≤1.36(ZA)

DCP-T428W 0 ≤1.27(K)

MFC-L5715DW 0 ≤1.18(J)

DCP-L1632W 0 ≤1.05(B)

MFC-L3745CDW 0 ≤ZE

HL-L2400DWE 0 ≤1.15(J)

HL-L2425DW 0 ≤1.15(J)

MFC-L9570CDW(for Japan) 0 ≤ZD

DCP-L3528CDW 0 ≤1.16(L)

TD-4420DNZ 0 ≤N.21

DCP-L2530DW 0 ≤ZC

MFC-J1205W(XL) 0 ≤1.15(L)

DCP-L2552DN 0 ≤ZC

MFC-L5718DN 0 ≤1.18(J)

MFC-J690DW 0 ≤T

PT-E850TKW (for Vietnum) 0 ≤1.59

MFC-J5340DW 0 ≤1.20(L)

DCP-J4140N 0 ≤1.09(F)

HL-L2380DW 0 ≤W

MFC-J2740DW 0 ≤1.16(J)

HL-L5102DW 0 ≤1.82(ZG)

DCP-7189DW 0 ≤R

HL-L6415DN CSP 0 ≤1.16(G)

MFC-J6959DW 0 ≤1.16(G)

HL-L2315DW 0 ≤1.25(W)

MFC-L5912DW 0 ≤1.18(J)

MFC-L2805DW 0 ≤1.16(F)

MFC-L2820DW 0 ≤1.14(H)

HL-L2366DW 0 ≤1.36(Z)

MFC-J1300DW 0 ≤P

HL-J6000DW 0 ≤S

DCP-T510W 0 ≤Q

HL-L3228CDW 0 ≤1.11(J)

DCP-B7648DW 0 ≤1.16(F)

MFC-J995DW 0 ≤P

HL-5595DNH 0 ≤1.82(ZG)

DCP-T236 0 ≤1.01(A)

DCP-J4143N 0 ≤1.02(A)

HL-2595DW 0 ≤1.74(ZE)

MFC-T935DW 0 ≤1.03(B)

DCP-L5650DN 0 ≤ZZ

MFC-1912WR 0 ≤V

HL-L8260CDW 0 ≤1.65(ZH)

HL-L2445DW 0 ≤1.15(J)

HL-L2370DN 0 ≤1.74(ZE)

DCP-7190DW 0 ≤M

RJ-3050 0 ≤1.19

HL-L6402DW 0 ≤1.95(ZH)

MFC-1919NW 0 ≤R

DCP-J572N 0 ≤W

HL-L5212DN 0 ≤1.14(H)

MFC-L2730DN 0 ≤R

DCP-L2647DW 0 ≤1.20(J)

MFC-L2715DW 0 ≤ZC

DCP-J1200W(XL) 0 ≤1.15(L)

DCP-L2520DW 0 ≤X

DCP-L3520CDWE 0 ≤1.16(L)

MFC-L2760DW 0 ≤1.20(J)

DCP-L5502DN 0 ≤ZZ

MFC-L2771DW 0 ≤ZC

DCP-C1210N 0 ≤1.03(C)

MFC-B7811DW 0 ≤1.20(J)

Affected Packages

euvd bizhub_4000i no fix

euvd bizhub_5000i no fix

euvd pj_773 no fix

euvd pj_883 no fix

euvd pt_d800w no fix

euvd pt_e550w_for_china no fix

euvd pt_e550w_for_koria no fix

euvd pt_e550w_for_russia no fix

euvd pt_e550w_for_thailand no fix

euvd pt_e550w_for_tiwan_hongkong no fix

euvd pt_e550w_for_us_eu no fix

euvd pt_e550w_for_vietnum no fix

euvd pt_e800w no fix

euvd pt_e850tkw_for_asia_pacific_eu_us no fix

euvd pt_e850tkw_for_china no fix

euvd pt_e850tkw_for_koria no fix

euvd pt_e850tkw_for_thailand no fix

euvd pt_e850tkw_for_tiwan no fix

euvd pt_e850tkw_for_uae no fix

euvd pt_e850tkw_for_vietnum no fix

euvd pt_p750w no fix

euvd pt_p900w no fix

euvd pt_p900wc no fix

euvd pt_p950nw no fix

euvd ql_1110nwb no fix

euvd ql_1110nwbc no fix

euvd ql_1115nwb no fix

euvd ql_810w no fix

euvd ql_810wc no fix

euvd ql_820nwb no fix

euvd ql_820nwbc no fix

euvd rj_2050 no fix

euvd rj_2140 no fix

euvd rj_2150 no fix

euvd rj_3050 no fix

euvd rj_3050ai no fix

euvd rj_3150 no fix

euvd rj_3150ai no fix

euvd rj_3250wb no fix

euvd rj_4250wb no fix

euvd td_2120n no fix

euvd td_2125n no fix

euvd td_2130n no fix

euvd td_2135n no fix

euvd td_2310d no fix

euvd td_2320d no fix

euvd td_2320df no fix

euvd td_2320dsa no fix

euvd td_2350d no fix

euvd td_2350df no fix

euvd td_2350dfsa no fix

euvd td_2350dsa no fix

euvd td_4420dn no fix

euvd td_4520dn no fix

euvd td_4550dnwb no fix

euvd vc_500w no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 56 packages in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

The device generates its default administrator password using an algorithm based on the serial number. The serial number is exposed through multiple protocols (HTTP, HTTPS, IPP, PJL, SNMP) without authentication. An attacker can chain CVE-2024-51977 (serial number disclosure) with this vulnerability to generate the admin password remotely.

Know when HP gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

PoC Detected

Jul 25, 2025 - 17:15 vuln.today

Public exploit code

CVE Published

Jun 25, 2025 - 08:15 nvd

CRITICAL 9.8

DescriptionCVE.org

An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request.

Executive ViewAI

Why It Matters

A critical vulnerability in networked printing devices allows unauthenticated attackers to gain full administrative access by deriving default passwords from publicly discoverable serial numbers. Organizations with multifunction printers or networked print systems face immediate risk of unauthorized device control, data exfiltration from print jobs, and lateral network movement.

Business Impact: Severe

Compensating Controls

Network segmentation: isolate printers to dedicated VLAN with restricted inbound access. Disable unnecessary protocols (SNMP, IPP, HTTP) at device and firewall level. Implement WAF/firewall rules to block unauthenticated access to printer web interfaces on ports 80, 443, 631. Change default admin credentials to strong, unique passwords via secure local console access only. Monitor for CVE-2024-51977 exploitation attempts; block SNMP queries and HTTP requests that leak serial numbers. Require VPN/bastion host access for all remote printer management. Review printer access logs for brute-force or unauthorized authentication attempts.

Threat Intelligence Overview

Threat Score

4.9/10

Composite threat intelligence

EPSS Score

48.3%

Top 2% exploitable

Exploit

POC

Public exploit code exists

Data Quality

5 sources

Confidence: Medium

EUVD

NVD

CVE.org

EPSS POC (2)

GitHub Metasploit

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity CRITICAL

CISA KEV No

Public POC Yes

EPSS 48.3%

Patch available No

Active threat Yes

Deciding rule

CRITICAL + EPSS > 30%, no patch available

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Out-of-Cycle

Exploitation· derived

Poc

System Exposure· derived

Open

Automatable· derived

Yes

Human Impact

Very High

Priority Score

117

Low Medium High Critical

KEV: 0

EPSS: +48

CVSS: +49

PoC: +20

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Authentication Bypass CRITICAL

Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.