CVE-2024-21824

Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If this vulnerability is exploited, a network-adjacent user who can access the product may impersonate an administrative user. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.6 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://jvn.jp/en/jp/JVN82749078/
https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faqp00100601_000
https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faq00100823_000
https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002
https://www.toshibatec.com/information/20240306_01.html
https://jvn.jp/en/jp/JVN82749078/
https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faqp00100601_000
https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faq00100823_000
https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002
https://www.toshibatec.com/information/20240306_01.html

Configurations

No configuration.

History

No history.

Information

Published : 2024-03-18 08:15

Updated : 2024-11-21 08:55

NVD link : CVE-2024-21824

Mitre link : CVE-2024-21824

CVE.ORG link : CVE-2024-21824

JSON object : View

Products Affected

No product.

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2024-21824", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.6}]}, "published": "2024-03-18T08:15:06.087", "references": [{"url": "https://jvn.jp/en/jp/JVN82749078/", "source": "vultures@jpcert.or.jp"}, {"url": "https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faqp00100601_000", "source": "vultures@jpcert.or.jp"}, {"url": "https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faq00100823_000", "source": "vultures@jpcert.or.jp"}, {"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html", "source": "vultures@jpcert.or.jp"}, {"url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002", "source": "vultures@jpcert.or.jp"}, {"url": "https://www.toshibatec.com/information/20240306_01.html", "source": "vultures@jpcert.or.jp"}, {"url": "https://jvn.jp/en/jp/JVN82749078/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faqp00100601_000", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faq00100823_000", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.toshibatec.com/information/20240306_01.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If this vulnerability is exploited, a network-adjacent user who can access the product may impersonate an administrative user. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References]."}, {"lang": "es", "value": "Existe una vulnerabilidad de autenticaci\u00f3n incorrecta en varias impresoras y esc\u00e1neres que implementan la administraci\u00f3n basada en web proporcionada por BROTHER INDUSTRIES, LTD. Si se explota esta vulnerabilidad, un usuario adyacente a la red que pueda acceder al producto puede hacerse pasar por un usuario administrativo. En cuanto a los detalles de los nombres de productos, n\u00fameros de modelo y versiones afectados, consulte la informaci\u00f3n proporcionada por los respectivos proveedores que figuran en [Referencias]."}], "lastModified": "2024-11-21T08:55:04.223", "sourceIdentifier": "vultures@jpcert.or.jp"}