Записи Brother
24 опубликованных записей вендора brother.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 1 · 4,2 %
- Pre-auth RCE
- 1
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-787 Out-of-bounds Write2
- CWE-428 Unquoted Search Path or Element2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-476 NULL Pointer Dereference1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
24 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
60На этой неделе | CVE-2017-16249Готовый эксплойт | The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the sebrother · dcp-j132w firmware | Высокая7,5 | — | 59,3 % | 9 нояб. 2017 г. |
49В плане | CVE-2017-7588Proof of concept | On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempbrother · mfc firmware · CWE-287 | Критическая9,8 | — | 33,5 % | 12 апр. 2017 г. |
40В плане | CVE-2019-13192Эксплойта нет | Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parsebrother · ads-2400n firmware · CWE-787 | Критическая9,8 | — | 3,8 % | 13 мар. 2020 г. |
36Наблюдать | CVE-2019-13193Эксплойта нет | Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parsebrother · ads-2400n firmware · CWE-787 | Высокая8,8 | — | 3,0 % | 13 мар. 2020 г. |
36Наблюдать | CVE-2019-20457Эксплойта нет | An issue was discovered on Brother MFC-J491DW C1806180757 devices.CWE-276 | Критическая9,1 | — | 0,7 % | 7 нояб. 2024 г. |
35Наблюдать | CVE-2017-2244Эксплойта нет | Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authenticatibrother · mfc-j960dwn firmware · CWE-352 | Высокая8,8 | — | 0,7 % | 7 июл. 2017 г. |
34Наблюдать | CVE-2020-36928Эксплойта нет | Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Pathbrother · bragent · CWE-428 | Высокая8,5 | — | 0,2 % | 15 янв. 2026 г. |
34Наблюдать | CVE-2020-36929Эксплойта нет | Brother BRPrint Auditor 3.0.7 - 'Multiple' Unquoted Service Pathbrother · brprint auditor · CWE-428 | Высокая8,5 | — | 0,2 % | 15 янв. 2026 г. |
31Наблюдать | CVE-2013-2674Эксплойта нет | Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive brother · mfc-9970cdw firmware · CWE-200 | Высокая7,5 | — | 2,5 % | 3 февр. 2020 г. |
31Наблюдать | CVE-2013-2676Эксплойта нет | Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IPbrother · mfc-9970cdw firmware · CWE-200 | Высокая7,5 | — | 2,4 % | 4 февр. 2020 г. |
31Наблюдать | CVE-2017-12568Эксплойта нет | Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows remote attackers tobrother · dcp-j132w firmware | Высокая7,5 | — | 1,8 % | 5 авг. 2017 г. |
31Наблюдать | CVE-2019-13194Эксплойта нет | Some Brother printers (such as the HL-L8360CDW v1.20) were affected by different information disclosure vulnerabilities that provided sensitbrother · ads-2400n firmware · CWE-306 | Высокая7,5 | — | 1,7 % | 13 мар. 2020 г. |
30Наблюдать | CVE-2013-2672Эксплойта нет | Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords.brother · mfc-9970cdw firmware · CWE-522 | Высокая7,5 | — | 1,6 % | 3 февр. 2020 г. |
30Наблюдать | CVE-2023-29984Эксплойта нет | Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3.fujifilm · docuprint m265 z firmware · CWE-476 | Высокая7,5 | — | 0,9 % | 11 июл. 2023 г. |
27Наблюдать | CVE-2013-2675Эксплойта нет | Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability which could allow remote attackerbrother · mfc-9970cdw firmware · CWE-1021 | Средняя6,5 | — | 2,1 % | 5 февр. 2020 г. |
27Наблюдать | CVE-2013-2673Эксплойта нет | Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unaubrother · mfc-9970cdw firmware · CWE-863 | Средняя6,8 | — | 0,5 % | 3 февр. 2020 г. |
22Наблюдать | CVE-2023-51654Эксплойта нет | Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier.brother · iprint\&scan · CWE-59 | Средняя5,5 | — | 0,1 % | 26 дек. 2023 г. |
21Наблюдать | CVE-2002-1055Эксплойта нет | Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long pabrother · nc-3100h | Средняя5,0 | — | 1,8 % | 4 окт. 2002 г. |
19Наблюдать | CVE-2018-11581Proof of concept | Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via thbrother · hl-l2340d firmware · CWE-79 | Средняя4,8 | — | 1,0 % | 1 июн. 2018 г. |
18Наблюдать | CVE-2013-2670Эксплойта нет | Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1.10) allows remote attackers to ibrother · mfc-9970cdw firmware · CWE-79 | Средняя4,3 | — | 2,0 % | 14 мар. 2014 г. |
18Наблюдать | CVE-2013-2507Эксплойта нет | Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware G (1.03) allow remote attackers to injebrother · mfc-9970cdw firmware · CWE-79 | Средняя4,3 | — | 2,0 % | 14 мар. 2014 г. |
18Наблюдать | CVE-2015-1056Эксплойта нет | Cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary wbrother · mfc-j4410dw firmware · CWE-79 | Средняя4,3 | — | 1,9 % | 16 янв. 2015 г. |
17Наблюдать | CVE-2013-2671Эксплойта нет | Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware L (1.10) allow remote attackers to injebrother · mfc-9970cdw firmware · CWE-79 | Средняя4,3 | — | 1,3 % | 14 мар. 2014 г. |
13Наблюдать | CVE-2023-28369Эксплойта нет | Brother iPrint&Scan V6.11.2 and earlier contains an improper access control vulnerability.brother · iprint\&scan | Низкая3,3 | — | 0,2 % | 18 мая 2023 г. |
- CVE-2017-1624960На этой неделе
The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the se
ВысокаяCVSS 7,5Готовый эксплойтEPSS 59 %brother · dcp-j132w firmware9 нояб. 2017 г.
- CVE-2017-758849В плане
On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attemp
КритическаяCVSS 9,8Proof of conceptEPSS 33 %brother · mfc firmware12 апр. 2017 г.
- CVE-2019-1319240В плане
Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parse
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %brother · ads-2400n firmware13 мар. 2020 г.
- CVE-2019-1319336Наблюдать
Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parse
ВысокаяCVSS 8,8Эксплойта нетEPSS 3 %brother · ads-2400n firmware13 мар. 2020 г.
- CVE-2019-2045736Наблюдать
An issue was discovered on Brother MFC-J491DW C1806180757 devices.
КритическаяCVSS 9,1Эксплойта нетEPSS 0 %7 нояб. 2024 г.
- CVE-2017-224435Наблюдать
Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authenticati
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %brother · mfc-j960dwn firmware7 июл. 2017 г.
- CVE-2020-3692834Наблюдать
Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Path
ВысокаяCVSS 8,5Эксплойта нетEPSS 0 %brother · bragent15 янв. 2026 г.
- CVE-2020-3692934Наблюдать
Brother BRPrint Auditor 3.0.7 - 'Multiple' Unquoted Service Path
ВысокаяCVSS 8,5Эксплойта нетEPSS 0 %brother · brprint auditor15 янв. 2026 г.
- CVE-2013-267431Наблюдать
Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %brother · mfc-9970cdw firmware3 февр. 2020 г.
- CVE-2013-267631Наблюдать
Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %brother · mfc-9970cdw firmware4 февр. 2020 г.
- CVE-2017-1256831Наблюдать
Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows remote attackers to
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %brother · dcp-j132w firmware5 авг. 2017 г.
- CVE-2019-1319431Наблюдать
Some Brother printers (such as the HL-L8360CDW v1.20) were affected by different information disclosure vulnerabilities that provided sensit
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %brother · ads-2400n firmware13 мар. 2020 г.
- CVE-2013-267230Наблюдать
Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords.
ВысокаяCVSS 7,5Эксплойта нетEPSS 1 %brother · mfc-9970cdw firmware3 февр. 2020 г.
- CVE-2023-2998430Наблюдать
Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3.
ВысокаяCVSS 7,5Эксплойта нетEPSS 0 %fujifilm · docuprint m265 z firmware11 июл. 2023 г.
- CVE-2013-267527Наблюдать
Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability which could allow remote attacker
СредняяCVSS 6,5Эксплойта нетEPSS 2 %brother · mfc-9970cdw firmware5 февр. 2020 г.
- CVE-2013-267327Наблюдать
Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unau
СредняяCVSS 6,8Эксплойта нетEPSS 0 %brother · mfc-9970cdw firmware3 февр. 2020 г.
- CVE-2023-5165422Наблюдать
Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier.
СредняяCVSS 5,5Эксплойта нетEPSS 0 %brother · iprint\&scan26 дек. 2023 г.
- CVE-2002-105521Наблюдать
Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long pa
СредняяCVSS 5,0Эксплойта нетEPSS 1 %brother · nc-3100h4 окт. 2002 г.
- CVE-2018-1158119Наблюдать
Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via th
СредняяCVSS 4,8Proof of conceptEPSS 1 %brother · hl-l2340d firmware1 июн. 2018 г.
- CVE-2013-267018Наблюдать
Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1.10) allows remote attackers to i
СредняяCVSS 4,3Эксплойта нетEPSS 2 %brother · mfc-9970cdw firmware14 мар. 2014 г.
- CVE-2013-250718Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware G (1.03) allow remote attackers to inje
СредняяCVSS 4,3Эксплойта нетEPSS 2 %brother · mfc-9970cdw firmware14 мар. 2014 г.
- CVE-2015-105618Наблюдать
Cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary w
СредняяCVSS 4,3Эксплойта нетEPSS 1 %brother · mfc-j4410dw firmware16 янв. 2015 г.
- CVE-2013-267117Наблюдать
Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware L (1.10) allow remote attackers to inje
СредняяCVSS 4,3Эксплойта нетEPSS 1 %brother · mfc-9970cdw firmware14 мар. 2014 г.
- CVE-2023-2836913Наблюдать
Brother iPrint&Scan V6.11.2 and earlier contains an improper access control vulnerability.
НизкаяCVSS 3,3Эксплойта нетEPSS 0 %brother · iprint\&scan18 мая 2023 г.