Vulnerability in Brother Dcp-J132w
CVE-2017-16249
The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying (~300 seconds) with an HTTP 500 error. While the server is hung, print jobs over the network are blocked and the web interface is inaccessible. An attacker can continuously send this malformed request to keep the device inaccessible to legitimate traffic.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.594 (99.1th percentile), scored .
High probability of exploitation in the next 30 days — patch promptly. 99th percentile — 99.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.594 · newest: 0.594 · change: 0.000
Affected products
Public proof-of-concept exploits
References
- www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-017/ (Exploit, Third Party Advisory)
- www.trustwave.com/Resources/SpiderLabs-Blog/Denial-of-Service-Vulnerability-in-… (Third Party Advisory)
- packetstormsecurity.com/files/144908/Debut-Embedded-httpd-1.20-Denial-Of-Servic… (Exploit, VDB Entry, Third Party Advisory)
- www.exploit-db.com/exploits/43119/ (Exploit, VDB Entry, Third Party Advisory, exploit)
Frequently asked questions
- What is CVE-2017-16249?
- CVE-2017-16249 is a high-severity vulnerability in Brother Dcp-J132w. CVSS score: 7.5/10. Published 2017-11-10.
- How severe is CVE-2017-16249?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2017-16249 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.