CVEvulnerability
CVE-2024-51978
9.8 CRITICAL
Official page ↗
- Status
- Deferred
- Published
- 2025-06-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-1391
Description
An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request.
Related
Weakness · CWE (1)
- CWE-1391 Use of Weak Credentials weakness
References
- https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf assets.contentstack.io
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51978.yaml github.com
- https://github.com/rapid7/metasploit-framework/pull/20349 github.com
- https://github.com/sfewer-r7/BrotherVulnerabilities github.com
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 support.brother.com
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 support.brother.com
- https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000 support.brother.com
- https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf www.konicaminolta.com
- https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed www.rapid7.com
- https://www.toshibatec.com/information/20250625_02.html www.toshibatec.com
- https://www.bleepingcomputer.com/news/security/brother-printer-bug-in-689-models-exposes-default-admin-passwords/ www.bleepingcomputer.com
- https://www.darkreading.com/endpoint-security/millions-brother-printers-critical-unpatchable-bug www.darkreading.com
- https://www.securityweek.com/new-vulnerabilities-expose-millions-of-brother-printers-to-hacking/ www.securityweek.com
- https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf assets.contentstack.io