Description (CNA)
An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Brother Industries, Ltd / DCP-J928N-W/B | affected 1.0 through 1.03(B) |
| Brother Industries, Ltd / MFC-J1800DW (Europe) | affected 1.0 through 1.13(H) |
| Brother Industries, Ltd / MFC-J1800DW (USA) | affected 1.0 through 1.02(B) |
| Brother Industries, Ltd / MFC-J4340DWE | affected 1.0 through 1.38(M) |
| Brother Industries, Ltd / MFC-J4345DWXL | affected 1.0 through 1.38(M) |
| Brother Industries, Ltd / MFC-J5855DWXL | affected 1.0 through 1.25(J) |
| Brother Industries, Ltd / MFC-J6555DWXL | affected 1.0 through 1.19(H) |
| Brother Industries, Ltd / DCP-B7520DW (China) | affected A through V |
| Brother Industries, Ltd / DCP-B7535DW (China) | affected A through V |
| Brother Industries, Ltd / DCP-B7640DW (Asia) | affected 1.0 through 1.16(F) |
| Brother Industries, Ltd / DCP-L2535DW (China) | affected A through M |
| Brother Industries, Ltd / DCP-L2540DW (Japan) | affected A through T |
| Brother Industries, Ltd / DCP-L2550DW (China) | affected A through M |
| Brother Industries, Ltd / DCP-L2550DW (Japan) | affected A through R |
| Brother Industries, Ltd / DCP-L2550DW (Taiwan) | affected A through V |
| Brother Industries, Ltd / DCP-L2660DW (Japan) | affected 1.0 through 1.08(C) |
| Brother Industries, Ltd / HL-L2361DN | affected 1.0 through 1.36(Z) |
| Brother Industries, Ltd / HL-L5210DN (Japan) | affected 1.0 through 1.12(F) |
| Brother Industries, Ltd / HL-L5210DW (Japan) | affected 1.0 through 1.12(F) |
| Brother Industries, Ltd / HL-L6310DW (Japan) | affected 1.0 through 1.10(F) |
| Brother Industries, Ltd / MFC-EX670 | affected 1.0 through 1.22(S) |
| Brother Industries, Ltd / MFC-L2700DW (Asia) | affected A through W |
| Brother Industries, Ltd / MFC-L2715DW (Taiwan/Korea/Hong Kong) | affected A through V |
| Brother Industries, Ltd / MFC-L2740DW (Japan) | affected A through U |
| Brother Industries, Ltd / MFC-L2750DW (Japan) | affected A through R |
| Brother Industries, Ltd / MFC-L2805DW (Asia) | affected 1.0 through 1.16(F) |
| Brother Industries, Ltd / MFC-L2860DW (Japan) | affected 1.0 through 1.08(C) |
| Brother Industries, Ltd / MFC-L2880DW (Japan) | affected 1.0 through 1.08(C) |
| Brother Industries, Ltd / MFC-L3770CDW (Japan) | affected A through ZA |
| Brother Industries, Ltd / MFC-L3780CDW (Japan) | affected 1.0 through 1.12(J) |
| Brother Industries, Ltd / MFC-L5710DW (Japan) | affected 1.0 through 1.12（H） |
| Brother Industries, Ltd / MFC-L5755DW (Japan) | affected A through ZP |
| Brother Industries, Ltd / MFC-L6900DW (Japan) | affected A through ZP |
| Brother Industries, Ltd / MFC-L8610CDW (Japan) | affected A through ZD |
| Brother Industries, Ltd / MFC-L9570CDW (Japan) | affected A through ZD |
| Brother Industries, Ltd / DS-940DW | affected A through G(1.7) |
| Brother Industries, Ltd / MDS-940DW | affected A through G(1.7) |
| Brother Industries, Ltd / TD-2130NSA | affected 1.0 through 1.25 |
| Brother Industries, Ltd / TD-2135NSA | affected 1.0 through 2.19 |
| Brother Industries, Ltd / TD-2135NWB | affected 1.0 through 2.19 |
| Brother Industries, Ltd / TD-2135NWBSA | affected 1.0 through 2.19 |
| Brother Industries, Ltd / SP-1 (Japan) | affected 1.0 through 1.03(A) |
| Brother Industries, Ltd / HL-L8260CDN | affected 0 through 1.65(ZH) |
| Brother Industries, Ltd / HL-L8260CDW | affected 0 through 1.65(ZH) |
| Brother Industries, Ltd / HL-L8360CDW | affected 0 through 1.68(ZG) |
| Brother Industries, Ltd / HL-L8360CDWT | affected 0 through 1.68(ZG) |
| Brother Industries, Ltd / HL-L9310CDW | affected 0 through 1.68(ZG) |
| Brother Industries, Ltd / DCP-L8410CDW | affected 0 through ZK |
| Brother Industries, Ltd / MFC-L8610CDW | affected 0 through ZK |
| Brother Industries, Ltd / MFC-L8690CDW | affected 0 through ZK |
| Brother Industries, Ltd / MFC-L8900CDW | affected 0 through ZM |
| Brother Industries, Ltd / MFC-L9570CDW | affected 0 through ZM |
| Brother Industries, Ltd / MFC-L9577CDW | affected 0 through ZM |
| Brother Industries, Ltd / HL-L5210DN | affected 1.0 through 1.14(H) |
| Brother Industries, Ltd / HL-L5212DN | affected 0 through 1.14(H) |
| Brother Industries, Ltd / HL-L5215DN | affected 0 through 1.14(H) |
| Brother Industries, Ltd / HL-L5210DW | affected 1.0 through 1.14(H) |
| Brother Industries, Ltd / HL-L5210DWT | affected 0 through 1.14(H) |
| Brother Industries, Ltd / HL-L5212DW | affected 0 through 1.14(H) |
| Brother Industries, Ltd / HL-L5215DW | affected 0 through 1.14(H) |
| Brother Industries, Ltd / HL-L6210DW | affected 0 through 1.14(H) |
| Brother Industries, Ltd / HL-L6210DWT | affected 0 through 1.14(H) |
| Brother Industries, Ltd / HL-L6217DW | affected 0 through 1.14(H) |
| Brother Industries, Ltd / HL-L5218DN | affected 0 through 1.12(F) |
| Brother Industries, Ltd / HL-L5228DW | affected 0 through 1.12(F) |
| Brother Industries, Ltd / HL-L6310DW | affected 1.0 through 1.16(G) |
| Brother Industries, Ltd / HL-L6410DN | affected 0 through 1.16(G) |
| Brother Industries, Ltd / HL-L6415DN | affected 0 through 1.16(G) |
| Brother Industries, Ltd / HL-L6412DW | affected 0 through 1.16(G) |
| Brother Industries, Ltd / HL-L6415DW | affected 0 through 1.16(G) |
| Brother Industries, Ltd / HL-L6415DWT | affected 0 through 1.16(G) |
| Brother Industries, Ltd / HL-L6418DW | affected 0 through 1.16(G) |
| Brother Industries, Ltd / HL-EX415DW | affected 0 through 1.16(G) |
| Brother Industries, Ltd / DCP-L5510DN | affected 0 through 1.18(J) |
| Brother Industries, Ltd / DCP-L5512DN | affected 0 through 1.18(J) |
| Brother Industries, Ltd / DCP-L5518DN | affected 0 through 1.18(J) |
| Brother Industries, Ltd / DCP-L5510DW | affected 0 through 1.18(J) |
| Brother Industries, Ltd / DCP-L5610DN | affected 0 through 1.18(J) |
| Brother Industries, Ltd / DCP-L5660DN | affected 0 through 1.18(J) |
| Brother Industries, Ltd / DCP-L5662DN | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L5710DN | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L5715DN | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L5718DN | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L5710DW | affected 1.0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L5715DW | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L5717DW | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L5728DW | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L5912DW | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L5915DW | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L6710DW | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L6720DW | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L6810DW | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L6910DN | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L6915DN | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L6912DW | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L6915DW | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-EX910 | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-EX915DW | affected 0 through 1.18(J) |
| Brother Industries, Ltd / MFC-L6820DW | affected 0 through 1.15(H) |
| Brother Industries, Ltd / HL-L9410CDN | affected 0 through 1.23(Q) |
CWE
CWE-1391
References
- https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed
- https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf
- https://github.com/rapid7/metasploit-framework/pull/20349
- https://github.com/sfewer-r7/BrotherVulnerabilities
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51978.yaml
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000
- https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000
- https://www.toshibatec.com/information/20250625_02.html
- https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf
ADP enrichment
No English description supplied.
No English description supplied.
- https://www.securityweek.com/new-vulnerabilities-expose-millions-of-brother-printers-to-hacking/
- https://www.darkreading.com/endpoint-security/millions-brother-printers-critical-unpatchable-bug
- https://www.bleepingcomputer.com/news/security/brother-printer-bug-in-689-models-exposes-default-admin-passwords/