Brother Industries, Ltd
9 CVEs across 729 Brother Industries, Ltd products. Browse Brother Industries, Ltd vulnerabilities, severities, and proof-of-concept exploits.
Brother Industries, Ltd products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-8452 | Medium | 4.3 | 2025-08-12 | By using the "uscan" protocol provided by the eSCL specification, an attacker can discover the serial number of multi-function printers that implement the Brot… |
CVE-2024-51984 | Medium | 6.8 | 2025-06-25 | An authenticated attacker can reconfigure the target device to use an external service (such as LDAP or FTP) controlled by the attacker. If an existing passwor… |
CVE-2024-51983 | High | 7.5 | 2025-06-25 | An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken v… |
CVE-2024-51982 | High | 7.5 | 2025-06-25 | An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language (PJL) command that will crash the target device. The device will… |
CVE-2024-51981 | Medium | 5.3 | 2025-06-25 | An unauthenticated attacker may perform a blind server side request forgery (SSRF), due to a CLRF injection issue that can be leveraged to perform HTTP request… |
CVE-2024-51980 | Medium | 5.3 | 2025-06-25 | An unauthenticated attacker may perform a limited server side request forgery (SSRF), forcing the target device to open a TCP connection to an arbitrary port n… |
CVE-2024-51979 | High | 7.2 | 2025-06-25 | An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP service (TCP port 80), the HTTPS servi… |
CVE-2024-51978 | Critical | 9.8 | 2025-06-25 | An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated att… |
CVE-2024-51977 | Medium | 5.3 | 2025-06-25 | An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak… |