CVEvulnerability
CVE-2025-49797
8.5 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-06-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 8.5 HIGH — CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-552
Description
Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. If exploited, an arbitrary program may be executed with the administrative privilege. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
Related
Weakness · CWE (1)
- CWE-552 Files or Directories Accessible to External Parties weakness
References
- https://jvn.jp/en/vu/JVNVU91819309/ jvn.jp
- https://support.brother.com/g/s/security/ support.brother.com
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000009 www.ricoh.com
- https://www.toshibatec.com/information/20250625_01.html www.toshibatec.com