CVE-2024-51978

{"id": "CVE-2024-51978", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@rapid7.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2025-06-25T08:15:31.223", "references": [{"url": "https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf", "source": "cve@rapid7.com"}, {"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51978.yaml", "source": "cve@rapid7.com"}, {"url": "https://github.com/rapid7/metasploit-framework/pull/20349", "source": "cve@rapid7.com"}, {"url": "https://github.com/sfewer-r7/BrotherVulnerabilities", "source": "cve@rapid7.com"}, {"url": "https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000", "source": "cve@rapid7.com"}, {"url": "https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000", "source": "cve@rapid7.com"}, {"url": "https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000", "source": "cve@rapid7.com"}, {"url": "https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf", "source": "cve@rapid7.com"}, {"url": "https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed", "source": "cve@rapid7.com"}, {"url": "https://www.toshibatec.com/information/20250625_02.html", "source": "cve@rapid7.com"}, {"url": "https://www.bleepingcomputer.com/news/security/brother-printer-bug-in-689-models-exposes-default-admin-passwords/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.darkreading.com/endpoint-security/millions-brother-printers-critical-unpatchable-bug", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.securityweek.com/new-vulnerabilities-expose-millions-of-brother-printers-to-hacking/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cve@rapid7.com", "description": [{"lang": "en", "value": "CWE-1391"}]}], "descriptions": [{"lang": "en", "value": "An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request."}, {"lang": "es", "value": "Un atacante no autenticado que conozca el n\u00famero de serie del dispositivo objetivo puede generar la contrase\u00f1a de administrador predeterminada. Un atacante no autenticado puede descubrir primero el n\u00famero de serie del dispositivo objetivo mediante CVE-2024-51977 a trav\u00e9s de HTTP/HTTPS/IPP, una solicitud PJL o una solicitud SNMP. "}], "lastModified": "2025-07-25T17:15:30.143", "sourceIdentifier": "cve@rapid7.com"}