CVEvulnerability
CVE-2024-51983
7.5 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-06-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-1286
Description
An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device.
Related
Weakness · CWE (1)
- CWE-1286 Improper Validation of Syntactic Correctness of Input weakness
References
- https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf assets.contentstack.io
- https://github.com/sfewer-r7/BrotherVulnerabilities github.com
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 support.brother.com
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 support.brother.com
- https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html www.fujifilm.com
- https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf www.konicaminolta.com
- https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed www.rapid7.com
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007 www.ricoh.com
- https://www.toshibatec.com/information/20250625_02.html www.toshibatec.com
- https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf assets.contentstack.io