Brother kayıtları
brother üreticisine ait 24 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %4,2
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-787 Out-of-bounds Write2
- CWE-428 Unquoted Search Path or Element2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-476 NULL Pointer Dereference1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
24 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
49Planlayın | CVE-2017-7588Kavram kanıtı | On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempbrother · mfc firmware · CWE-287 | Kritik9,8 | — | %33,6 | 12 Nis 2017 |
48Planlayın | CVE-2017-16249Silahlaştırılmış | The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the sebrother · dcp-j132w firmware | Yüksek7,5 | — | %59,4 | 9 Kas 2017 |
40Planlayın | CVE-2019-13192İstismar yok | Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parsebrother · ads-2400n firmware · CWE-787 | Kritik9,8 | — | %3,8 | 13 Mar 2020 |
36İzleyin | CVE-2019-13193İstismar yok | Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parsebrother · ads-2400n firmware · CWE-787 | Yüksek8,8 | — | %3,1 | 13 Mar 2020 |
36İzleyin | CVE-2019-20457İstismar yok | An issue was discovered on Brother MFC-J491DW C1806180757 devices.CWE-276 | Kritik9,1 | — | %0,7 | 7 Kas 2024 |
35İzleyin | CVE-2017-2244İstismar yok | Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authenticatibrother · mfc-j960dwn firmware · CWE-352 | Yüksek8,8 | — | %0,7 | 7 Tem 2017 |
34İzleyin | CVE-2020-36928İstismar yok | Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Pathbrother · bragent · CWE-428 | Yüksek8,5 | — | %0,3 | 15 Oca 2026 |
34İzleyin | CVE-2020-36929İstismar yok | Brother BRPrint Auditor 3.0.7 - 'Multiple' Unquoted Service Pathbrother · brprint auditor · CWE-428 | Yüksek8,5 | — | %0,3 | 15 Oca 2026 |
31İzleyin | CVE-2013-2674İstismar yok | Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive brother · mfc-9970cdw firmware · CWE-200 | Yüksek7,5 | — | %2,6 | 3 Şub 2020 |
31İzleyin | CVE-2013-2676İstismar yok | Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IPbrother · mfc-9970cdw firmware · CWE-200 | Yüksek7,5 | — | %2,4 | 4 Şub 2020 |
31İzleyin | CVE-2017-12568İstismar yok | Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows remote attackers tobrother · dcp-j132w firmware | Yüksek7,5 | — | %1,9 | 5 Ağu 2017 |
31İzleyin | CVE-2019-13194İstismar yok | Some Brother printers (such as the HL-L8360CDW v1.20) were affected by different information disclosure vulnerabilities that provided sensitbrother · ads-2400n firmware · CWE-306 | Yüksek7,5 | — | %1,8 | 13 Mar 2020 |
30İzleyin | CVE-2013-2672İstismar yok | Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords.brother · mfc-9970cdw firmware · CWE-522 | Yüksek7,5 | — | %1,7 | 3 Şub 2020 |
30İzleyin | CVE-2023-29984İstismar yok | Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3.fujifilm · docuprint m265 z firmware · CWE-476 | Yüksek7,5 | — | %0,9 | 11 Tem 2023 |
27İzleyin | CVE-2013-2675İstismar yok | Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability which could allow remote attackerbrother · mfc-9970cdw firmware · CWE-1021 | Orta6,5 | — | %2,2 | 5 Şub 2020 |
27İzleyin | CVE-2013-2673İstismar yok | Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unaubrother · mfc-9970cdw firmware · CWE-863 | Orta6,8 | — | %0,5 | 3 Şub 2020 |
22İzleyin | CVE-2023-51654İstismar yok | Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier.brother · iprint\&scan · CWE-59 | Orta5,5 | — | %0,2 | 26 Ara 2023 |
21İzleyin | CVE-2002-1055İstismar yok | Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long pabrother · nc-3100h | Orta5,0 | — | %1,8 | 4 Eki 2002 |
19İzleyin | CVE-2018-11581Kavram kanıtı | Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via thbrother · hl-l2340d firmware · CWE-79 | Orta4,8 | — | %1,1 | 1 Haz 2018 |
18İzleyin | CVE-2013-2670İstismar yok | Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1.10) allows remote attackers to ibrother · mfc-9970cdw firmware · CWE-79 | Orta4,3 | — | %2,0 | 14 Mar 2014 |
18İzleyin | CVE-2013-2507İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware G (1.03) allow remote attackers to injebrother · mfc-9970cdw firmware · CWE-79 | Orta4,3 | — | %2,0 | 14 Mar 2014 |
18İzleyin | CVE-2015-1056İstismar yok | Cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary wbrother · mfc-j4410dw firmware · CWE-79 | Orta4,3 | — | %1,9 | 16 Oca 2015 |
17İzleyin | CVE-2013-2671İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware L (1.10) allow remote attackers to injebrother · mfc-9970cdw firmware · CWE-79 | Orta4,3 | — | %1,3 | 14 Mar 2014 |
13İzleyin | CVE-2023-28369İstismar yok | Brother iPrint&Scan V6.11.2 and earlier contains an improper access control vulnerability.brother · iprint\&scan | Düşük3,3 | — | %0,2 | 18 May 2023 |
- CVE-2017-758849Planlayın
On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attemp
KritikCVSS 9,8Kavram kanıtıEPSS %34brother · mfc firmware12 Nis 2017
- CVE-2017-1624948Planlayın
The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the se
YüksekCVSS 7,5SilahlaştırılmışEPSS %59brother · dcp-j132w firmware9 Kas 2017
- CVE-2019-1319240Planlayın
Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parse
KritikCVSS 9,8İstismar yokEPSS %4brother · ads-2400n firmware13 Mar 2020
- CVE-2019-1319336İzleyin
Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parse
YüksekCVSS 8,8İstismar yokEPSS %3brother · ads-2400n firmware13 Mar 2020
- CVE-2019-2045736İzleyin
An issue was discovered on Brother MFC-J491DW C1806180757 devices.
KritikCVSS 9,1İstismar yokEPSS %17 Kas 2024
- CVE-2017-224435İzleyin
Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authenticati
YüksekCVSS 8,8İstismar yokEPSS %1brother · mfc-j960dwn firmware7 Tem 2017
- CVE-2020-3692834İzleyin
Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Path
YüksekCVSS 8,5İstismar yokEPSS %0brother · bragent15 Oca 2026
- CVE-2020-3692934İzleyin
Brother BRPrint Auditor 3.0.7 - 'Multiple' Unquoted Service Path
YüksekCVSS 8,5İstismar yokEPSS %0brother · brprint auditor15 Oca 2026
- CVE-2013-267431İzleyin
Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive
YüksekCVSS 7,5İstismar yokEPSS %3brother · mfc-9970cdw firmware3 Şub 2020
- CVE-2013-267631İzleyin
Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP
YüksekCVSS 7,5İstismar yokEPSS %2brother · mfc-9970cdw firmware4 Şub 2020
- CVE-2017-1256831İzleyin
Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows remote attackers to
YüksekCVSS 7,5İstismar yokEPSS %2brother · dcp-j132w firmware5 Ağu 2017
- CVE-2019-1319431İzleyin
Some Brother printers (such as the HL-L8360CDW v1.20) were affected by different information disclosure vulnerabilities that provided sensit
YüksekCVSS 7,5İstismar yokEPSS %2brother · ads-2400n firmware13 Mar 2020
- CVE-2013-267230İzleyin
Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords.
YüksekCVSS 7,5İstismar yokEPSS %2brother · mfc-9970cdw firmware3 Şub 2020
- CVE-2023-2998430İzleyin
Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3.
YüksekCVSS 7,5İstismar yokEPSS %1fujifilm · docuprint m265 z firmware11 Tem 2023
- CVE-2013-267527İzleyin
Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability which could allow remote attacker
OrtaCVSS 6,5İstismar yokEPSS %2brother · mfc-9970cdw firmware5 Şub 2020
- CVE-2013-267327İzleyin
Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unau
OrtaCVSS 6,8İstismar yokEPSS %1brother · mfc-9970cdw firmware3 Şub 2020
- CVE-2023-5165422İzleyin
Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier.
OrtaCVSS 5,5İstismar yokEPSS %0brother · iprint\&scan26 Ara 2023
- CVE-2002-105521İzleyin
Buffer overflow in administrative web server for Brother NC-3100h printer allows remote attackers to cause a denial of service via a long pa
OrtaCVSS 5,0İstismar yokEPSS %2brother · nc-3100h4 Eki 2002
- CVE-2018-1158119İzleyin
Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via th
OrtaCVSS 4,8Kavram kanıtıEPSS %1brother · hl-l2340d firmware1 Haz 2018
- CVE-2013-267018İzleyin
Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1.10) allows remote attackers to i
OrtaCVSS 4,3İstismar yokEPSS %2brother · mfc-9970cdw firmware14 Mar 2014
- CVE-2013-250718İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware G (1.03) allow remote attackers to inje
OrtaCVSS 4,3İstismar yokEPSS %2brother · mfc-9970cdw firmware14 Mar 2014
- CVE-2015-105618İzleyin
Cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary w
OrtaCVSS 4,3İstismar yokEPSS %2brother · mfc-j4410dw firmware16 Oca 2015
- CVE-2013-267117İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware L (1.10) allow remote attackers to inje
OrtaCVSS 4,3İstismar yokEPSS %1brother · mfc-9970cdw firmware14 Mar 2014
- CVE-2023-2836913İzleyin
Brother iPrint&Scan V6.11.2 and earlier contains an improper access control vulnerability.
DüşükCVSS 3,3İstismar yokEPSS %0brother · iprint\&scan18 May 2023