Brother
24 CVEs across 776 Brother products. Browse Brother vulnerabilities, severities, and proof-of-concept exploits.
Brother products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-47985 | High | 7.8 | 2026-06-19 | Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Atta… |
CVE-2020-36929 | High | 7.8 | 2026-01-16 | Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to potentially… |
CVE-2020-36928 | High | 7.8 | 2026-01-16 | Brother BRAgent 1.38 contains an unquoted service path vulnerability in the WBA_Agent_Client service running with LocalSystem privileges. Attackers can exploit… |
CVE-2023-51654 | Medium | 5.5 | 2023-12-26 | Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by… |
CVE-2023-29984 | High | 7.5 | 2023-07-11 | Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted… |
CVE-2023-28369 | Low | 3.3 | 2023-05-18 | Brother iPrint&Scan V6.11.2 and earlier contains an improper access control vulnerability. This vulnerability may be exploited by the other app installed on th… |
CVE-2019-13194 | High | 7.5 | 2020-03-13 | Some Brother printers (such as the HL-L8360CDW v1.20) were affected by different information disclosure vulnerabilities that provided sensitive information to… |
CVE-2019-13193 | High | 8.8 | 2020-03-13 | Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parse the cookie value p… |
CVE-2019-13192 | Critical | 9.8 | 2020-03-13 | Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names pr… |
CVE-2013-2675 | Medium | 6.5 | 2020-02-05 | Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability which could allow remote attackers to obtain sensiti… |
CVE-2013-2676 | High | 7.5 | 2020-02-04 | Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP addresses and othe… |
CVE-2013-2674 | High | 7.5 | 2020-02-03 | Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive information from re… |
CVE-2013-2673 | Medium | 6.8 | 2020-02-03 | Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unauthorized access. |
CVE-2013-2672 | High | 7.5 | 2020-02-03 | Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords. |
CVE-2018-11581 | Medium | 4.8 | 2018-06-01 | Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via the url parameter to… |
CVE-2017-16249 | High | 7.5 | 2017-11-10 | The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until… |
CVE-2017-12568 | High | 7.5 | 2017-08-06 | Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows remote attackers to hang the printer (… |
CVE-2017-2244 | High | 8.8 | 2017-07-07 | Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrator… |
CVE-2017-7588 | Critical | 9.8 | 2017-04-12 | On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt. Affected models… |
CVE-2015-1056 | | 2015-01-16 | Cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML v… | |
CVE-2013-2671 | | 2014-03-14 | Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware L (1.10) allow remote attackers to inject arbitrary web sc… | |
CVE-2013-2670 | | 2014-03-14 | Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1.10) allows remote attackers to inject arbitrary web… | |
CVE-2013-2507 | | 2014-03-14 | Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware G (1.03) allow remote attackers to inject arbitrary web sc… | |
CVE-2002-1055 | | 2002-10-04 | Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long password. |