Search
Find a vulnerability
Search criteria
18 vulnerabilities by Brother Industries
JVNDB-2026-002119
Vulnerability from jvndb - Published: 2026-01-30 11:26 - Updated:2026-01-30 11:26
Severity
Summary
Multiple vulnerabilities in BROTHER MFPs (multifunction printers)
Details
Multiple MFPs provided by BROTHER INDUSTRIES, LTD. contain multiple vulnerabilities listed below.
- Improper certificate validation (CWE-295) - CVE-2025-53869
- Hidden Functionality (CWE-912) - CVE-2025-55704
References
| Type | URL | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
Impacted products
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-002119.html",
"dc:date": "2026-01-30T11:26+09:00",
"dcterms:issued": "2026-01-30T11:26+09:00",
"dcterms:modified": "2026-01-30T11:26+09:00",
"description": "Multiple MFPs provided by BROTHER INDUSTRIES, LTD. contain multiple vulnerabilities listed below.\u003cul\u003e\u003cli\u003eImproper certificate validation (CWE-295) - CVE-2025-53869\u003c/li\u003e\u003cli\u003eHidden Functionality (CWE-912) - CVE-2025-55704\u003c/li\u003e\u003c/ul\u003eAnton Fabricius of SySS GmbH reported these vulnerabilities to the developer.\r\nJPCERT/CC coordinated between the reporter and the developer.",
"link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-002119.html",
"sec:cpe": [
{
"#text": "cpe:/a:brother:multiple_products",
"@product": "(Multiple Products)",
"@vendor": "Brother Industries",
"@version": "2.2"
},
{
"#text": "cpe:/a:ricoh:multiple_product",
"@product": "(multiple product)",
"@vendor": "Ricoh Co., Ltd",
"@version": "2.2"
},
{
"#text": "cpe:/o:konicaminolta:multiple_product",
"@product": "(Multiple Products)",
"@vendor": "KONICA MINOLTA, INC.",
"@version": "2.2"
}
],
"sec:cvss": {
"@score": "5.3",
"@severity": "Medium",
"@type": "Base",
"@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2026-002119",
"sec:references": [
{
"#text": "https://jvn.jp/en/vu/JVNVU92878805/index.html",
"@id": "JVNVU#92878805",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-53869",
"@id": "CVE-2025-53869",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-55704",
"@id": "CVE-2025-55704",
"@source": "CVE"
},
{
"#text": "https://cwe.mitre.org/data/definitions/295.html",
"@id": "CWE-295",
"@title": "Improper Certificate Validation(CWE-295)"
},
{
"#text": "https://cwe.mitre.org/data/definitions/912.html",
"@id": "CWE-912",
"@title": "Hidden Functionality(CWE-912)"
}
],
"title": "Multiple vulnerabilities in BROTHER MFPs (multifunction printers)"
}
JVNDB-2026-001732
Vulnerability from jvndb - Published: 2026-01-26 16:04 - Updated:2026-01-26 16:04
Severity
Summary
Multiple Brother software installers may insecurely load Dynamic Link Libraries
Details
Multiple software installers provided by Brother Industries, Ltd. may insecurely load some dynamic link libraries.
- Uncontrolled search path element (CWE-427) - CVE-2016-2542, CVE-2021-41526
References
| Type | URL | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-001732.html",
"dc:date": "2026-01-26T16:04+09:00",
"dcterms:issued": "2026-01-26T16:04+09:00",
"dcterms:modified": "2026-01-26T16:04+09:00",
"description": "Multiple software installers provided by Brother Industries, Ltd. may insecurely load some dynamic link libraries.\u003cul\u003e\u003cli\u003eUncontrolled search path element (CWE-427) - CVE-2016-2542, CVE-2021-41526\u003c/li\u003e\u003c/ul\u003eKazuma Matsumoto of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to Brother Industries, Ltd. and coordinated.\r\nAfter the coordination was completed, Brother Industries, Ltd. reported the case to JPCERT/CC to notify users of the solution through JVN.",
"link": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-001732.html",
"sec:cpe": [
{
"#text": "cpe:/a:brother:software_update_notification_updater",
"@product": "Software Update Notification Updater",
"@vendor": "Brother Industries",
"@version": "2.2"
},
{
"#text": "cpe:/a:brother:status_monitor_update_tool",
"@product": "Status Monitor Update Tool",
"@vendor": "Brother Industries",
"@version": "2.2"
},
{
"#text": "cpe:/o:brother:universal_printer_driver",
"@product": "Universal Printer Driver",
"@vendor": "Brother Industries",
"@version": "2.2"
},
{
"#text": "cpe:/o:brother:universal_printer_driver_for_br-script",
"@product": "Universal Printer Driver for BR-Script (PostScript language emulation)",
"@vendor": "Brother Industries",
"@version": "2.2"
},
{
"#text": "cpe:/o:brother:universal_printer_driver_for_pcl",
"@product": "Universal Printer Driver for PCL",
"@vendor": "Brother Industries",
"@version": "2.2"
}
],
"sec:cvss": {
"@score": "7.8",
"@severity": "High",
"@type": "Base",
"@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2026-001732",
"sec:references": [
{
"#text": "https://jvn.jp/en/vu/JVNVU93474119/index.html",
"@id": "JVNVU#93474119",
"@source": "JVN"
},
{
"#text": "https://jvn.jp/en/ta/JVNTA91240916/",
"@id": "JVNTA#91240916",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2016-2542",
"@id": "CVE-2016-2542",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2021-41526",
"@id": "CVE-2021-41526",
"@source": "CVE"
},
{
"#text": "https://cwe.mitre.org/data/definitions/427.html",
"@id": "CWE-427",
"@title": "Uncontrolled Search Path Element(CWE-427)"
}
],
"title": "Multiple Brother software installers may insecurely load Dynamic Link Libraries"
}
JVNDB-2025-021305
Vulnerability from jvndb - Published: 2025-12-09 17:25 - Updated:2025-12-09 17:25
Severity
Summary
Android App "Brother iPrint&Scan" improper use of an external cache directory
Details
iPrint&Scan provided by Brother Industries, Ltd. contains the following vulnerability.
- Improper use of an external cache directory (CWE-524) - CVE-2025-64696
References
| Type | URL | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-021305.html",
"dc:date": "2025-12-09T17:25+09:00",
"dcterms:issued": "2025-12-09T17:25+09:00",
"dcterms:modified": "2025-12-09T17:25+09:00",
"description": "iPrint\u0026Scan provided by Brother Industries, Ltd. contains the following vulnerability.\u003cul\u003e\u003cli\u003eImproper use of an external cache directory (CWE-524) - CVE-2025-64696\u003c/li\u003e\u003c/ul\u003eJohan Francsics reported this vulnerability to BROTHER INDUSTRIES, LTD. and coordinated.\r\nAfter the coordination, BROTHER INDUSTRIES, LTD. reported this case to JPCERT/CC to notify users of its solution through JVN.",
"link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-021305.html",
"sec:cpe": {
"#text": "cpe:/a:brother:iprint%26scan",
"@product": "Brother iPrint\u0026Scan",
"@vendor": "Brother Industries",
"@version": "2.2"
},
"sec:cvss": {
"@score": "3.3",
"@severity": "Low",
"@type": "Base",
"@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2025-021305",
"sec:references": [
{
"#text": "https://jvn.jp/en/vu/JVNVU99973778/index.html",
"@id": "JVNVU#99973778",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-64696",
"@id": "CVE-2025-64696",
"@source": "CVE"
},
{
"#text": "https://cwe.mitre.org/data/definitions/524.html",
"@id": "CWE-524",
"@title": "Use of Cache Containing Sensitive Information(CWE-524)"
}
],
"title": "Android App \"Brother iPrint\u0026Scan\" improper use of an external cache directory"
}
JVNDB-2025-014081
Vulnerability from jvndb - Published: 2025-09-19 10:52 - Updated:2025-09-19 10:52Summary
Multiple Brother and its OEM products with weak initial administrator passwords
Details
Multiple products provided by BROTHER INDUSTRIES, LTD and other OEM vendors are setup with weak initial administrator passwords, which can be derived from their serial numbers.
This is reported by Rapid7, and treated on JVNVU#90043828, CVE-2024-51978.
Brother states that
(1) serial numbers have been available without authentication by design, for system management purposes, and
(2) to fix CVE-2024-51978, the production-lines have been revised to introduce the initial passwords which are hard to derive from its serial numbers
After the publication of CVE-2024-51978, runZero reported that eSCL/uscan can be also used to retrieve serial numbers without authentication.
eSCL/uscan is not described in CVE-2024-51977, and considering the existence of CVE-2024-51978, Austin Hackers Anonymous assigns CVE-2025-8452.
runZero reported this issue to the developer.
JPCERT/CC coordinated between the reporter and the developer.
References
| Type | URL | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
Impacted products
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-014081.html",
"dc:date": "2025-09-19T10:52+09:00",
"dcterms:issued": "2025-09-19T10:52+09:00",
"dcterms:modified": "2025-09-19T10:52+09:00",
"description": "Multiple products provided by BROTHER INDUSTRIES, LTD and other OEM vendors are setup with weak initial administrator passwords, which can be derived from their serial numbers.\r\nThis is reported by Rapid7, and treated on \u003ca href=\"https://jvn.jp/en/vu/JVNVU90043828/\"target=\"blank\"\u003eJVNVU#90043828\u003c/a\u003e, \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2024-51978\"target=\"blank\"\u003eCVE-2024-51978\u003c/a\u003e.\r\nBrother states that\r\n (1) serial numbers have been available without authentication by design, for system management purposes, and\r\n (2) to fix CVE-2024-51978, the production-lines have been revised to introduce the initial passwords which are hard to derive from its serial numbers\r\n\r\nAfter the publication of CVE-2024-51978, runZero reported that eSCL/uscan can be also used to retrieve serial numbers without authentication.\r\neSCL/uscan is not described in CVE-2024-51977, and considering the existence of CVE-2024-51978, Austin Hackers Anonymous assigns \u003ca href=\"https://www.cve.org/CVERecord?id=CVE-2025-8452\"target=\"blank\"\u003eCVE-2025-8452\u003c/a\u003e.\r\n\r\nrunZero reported this issue to the developer.\r\nJPCERT/CC coordinated between the reporter and the developer.",
"link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-014081.html",
"sec:cpe": [
{
"#text": "cpe:/a:brother:multiple_products",
"@product": "(Multiple Products)",
"@vendor": "Brother Industries",
"@version": "2.2"
},
{
"#text": "cpe:/a:toshibatec:multiple_product",
"@product": "(Multiple Products)",
"@vendor": "TOSHIBA TEC",
"@version": "2.2"
},
{
"#text": "cpe:/o:konicaminolta:multiple_product",
"@product": "(Multiple Products)",
"@vendor": "KONICA MINOLTA, INC.",
"@version": "2.2"
}
],
"sec:identifier": "JVNDB-2025-014081",
"sec:references": [
{
"#text": "https://jvn.jp/en/vu/JVNVU93294882/index.html",
"@id": "JVNVU#93294882",
"@source": "JVN"
},
{
"#text": "https://jvn.jp/en/vu/JVNVU90043828/",
"@id": "JVNVU#90043828",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2025-8452",
"@id": "CVE-2025-8452",
"@source": "CVE"
},
{
"#text": "https://takeonme.org/cves/cve-2025-8452/",
"@id": "Brother Printer Serial Number Disclosure",
"@source": "Related Information"
},
{
"#text": "https://www.runzero.com/blog/brother-devices/",
"@id": "How to find Brother printer, scanner and label maker devices on your network",
"@source": "Related Information"
}
],
"title": "Multiple Brother and its OEM products with weak initial administrator passwords"
}
JVNDB-2024-000026
Vulnerability from jvndb - Published: 2024-03-06 18:12 - Updated:2024-03-06 18:12
Severity
Summary
Multiple vulnerabilities in printers and scanners which implement BROTHER Web Based Management
Details
Multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. contain multiple vulnerabilities listed below.
* Improper Authentication (CWE-287) - CVE-2024-21824
* Cross-Site Request Forgery (CWE-352) - CVE-2024-22475
Hiroki Yasui, Yudai Morii, Takaya Noma, Takayuki Sasaki, and Katsunari Yoshioka of Yokohama National University reported these vulnerabilities to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
| Type | URL | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000026.html",
"dc:date": "2024-03-06T18:12+09:00",
"dcterms:issued": "2024-03-06T18:12+09:00",
"dcterms:modified": "2024-03-06T18:12+09:00",
"description": "Multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. contain multiple vulnerabilities listed below.\r\n\r\n * Improper Authentication (CWE-287) - CVE-2024-21824\r\n * Cross-Site Request Forgery (CWE-352) - CVE-2024-22475\r\n\r\nHiroki Yasui, Yudai Morii, Takaya Noma, Takayuki Sasaki, and Katsunari Yoshioka of Yokohama National University reported these vulnerabilities to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
"link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000026.html",
"sec:cpe": {
"#text": "cpe:/a:brother:web_based_management",
"@product": "Web Based Management",
"@vendor": "Brother Industries",
"@version": "2.2"
},
"sec:cvss": [
{
"@score": "2.9",
"@severity": "Low",
"@type": "Base",
"@vector": "AV:A/AC:M/Au:N/C:P/I:N/A:N",
"@version": "2.0"
},
{
"@score": "5.3",
"@severity": "Medium",
"@type": "Base",
"@vector": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"@version": "3.0"
}
],
"sec:identifier": "JVNDB-2024-000026",
"sec:references": [
{
"#text": "https://jvn.jp/en/jp/JVN82749078/index.html",
"@id": "JVN#82749078",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-21824",
"@id": "CVE-2024-21824",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-22475",
"@id": "CVE-2024-22475",
"@source": "CVE"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-287",
"@title": "Improper Authentication(CWE-287)"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-352",
"@title": "Cross-Site Request Forgery(CWE-352)"
}
],
"title": "Multiple vulnerabilities in printers and scanners which implement BROTHER Web Based Management"
}
JVNDB-2023-014781
Vulnerability from jvndb - Published: 2023-12-26 09:27 - Updated:2024-03-18 18:05
Severity
Summary
Brother iPrint&Scan Desktop for Windows vulnerable to improper link resolution before file access
Details
iPrint&Scan Desktop for Windows provided by Brother Industries, Ltd. outputs logs to a certain log file.
The affected version of the product does not check whether the log file is a normal file or a symbolic link to a certain file (CWE-59).
Chris Au reported this vulnerability to Brother Industries, Ltd. and coordinated. Brother Industries, Ltd. and JPCERT/CC published respective advisories in order to notify users of this vulnerability.
References
| Type | URL | |
|---|---|---|
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-014781.html",
"dc:date": "2024-03-18T18:05+09:00",
"dcterms:issued": "2023-12-26T09:27+09:00",
"dcterms:modified": "2024-03-18T18:05+09:00",
"description": "iPrint\u0026Scan Desktop for Windows provided by Brother Industries, Ltd. outputs logs to a certain log file.\r\nThe affected version of the product does not check whether the log file is a normal file or a symbolic link to a certain file (CWE-59).\r\n\r\nChris Au reported this vulnerability to Brother Industries, Ltd. and coordinated. Brother Industries, Ltd. and JPCERT/CC published respective advisories in order to notify users of this vulnerability.",
"link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-014781.html",
"sec:cpe": {
"#text": "cpe:/a:brother:iprint%26scan",
"@product": "Brother iPrint\u0026Scan",
"@vendor": "Brother Industries",
"@version": "2.2"
},
"sec:cvss": [
{
"@score": "4.6",
"@severity": "Medium",
"@type": "Base",
"@vector": "AV:L/AC:L/Au:S/C:N/I:N/A:C",
"@version": "2.0"
},
{
"@score": "6.5",
"@severity": "Medium",
"@type": "Base",
"@vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"@version": "3.0"
}
],
"sec:identifier": "JVNDB-2023-014781",
"sec:references": [
{
"#text": "https://jvn.jp/en/vu/JVNVU97943829/",
"@id": "JVNVU#97943829",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2023-51654",
"@id": "CVE-2023-51654",
"@source": "CVE"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-51654",
"@id": "CVE-2023-51654",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-59",
"@title": "Link Following(CWE-59)"
}
],
"title": "Brother iPrint\u0026Scan Desktop for Windows vulnerable to improper link resolution before file access"
}
JVNDB-2023-002270
Vulnerability from jvndb - Published: 2023-06-30 11:49 - Updated:2024-04-22 16:07
Severity
Summary
Null pointer dereference vulnerability in multiple printers and MFPs which implement BROTHER debut web server
Details
Multiple printers and MFPs (multifunction printers) which implement Brother debut web server contain a null pointer dereference vulnerability (CWE-476, CVE-2023-29984).
Darren Johnson directly reported this vulnerability to BROTHER INDUSTRIES, LTD. and FUJIFILM Business Innovation Corp., and both vendors reported this case to JPCERT/CC to request the coordination between the reporter and the susceptible multiple vendors.
References
| Type | URL | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-002270.html",
"dc:date": "2024-04-22T16:07+09:00",
"dcterms:issued": "2023-06-30T11:49+09:00",
"dcterms:modified": "2024-04-22T16:07+09:00",
"description": "Multiple printers and MFPs (multifunction printers) which implement Brother debut web server contain a null pointer dereference vulnerability (CWE-476, CVE-2023-29984).\r\n\r\nDarren Johnson directly reported this vulnerability to BROTHER INDUSTRIES, LTD. and FUJIFILM Business Innovation Corp., and both vendors reported this case to JPCERT/CC to request the coordination between the reporter and the susceptible multiple vendors.",
"link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-002270.html",
"sec:cpe": {
"#text": "cpe:/a:brother:debutwebserver",
"@product": "debutwebserver",
"@vendor": "Brother Industries",
"@version": "2.2"
},
"sec:cvss": {
"@score": "5.3",
"@severity": "Medium",
"@type": "Base",
"@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2023-002270",
"sec:references": [
{
"#text": "http://jvn.jp/en/vu/JVNVU93767756/index.html",
"@id": "JVNVU#93767756",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2023-29984",
"@id": "CVE-2023-29984",
"@source": "CVE"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-29984",
"@id": "CVE-2023-29984",
"@source": "NVD"
},
{
"#text": "http://cwe.mitre.org/data/definitions/476.html",
"@id": "CWE-476",
"@title": "NULL Pointer Dereference(CWE-476)"
}
],
"title": "Null pointer dereference vulnerability in multiple printers and MFPs which implement BROTHER debut web server"
}
JVNDB-2023-001894
Vulnerability from jvndb - Published: 2023-05-19 15:40 - Updated:2023-05-19 15:40
Severity
Summary
Android App "Brother iPrint&Scan" vulnerable to improper access control
Details
Android App "Brother iPrint&Scan" provided by BROTHER INDUSTRIES, LTD. contains an improper access control vulnerability (CWE-284, CVE-2023-28369).
Johan Francsics reported this vulnerability to BROTHER INDUSTRIES, LTD. and coordinated. After the coordination, BROTHER INDUSTRIES, LTD. reported this case to JPCERT/CC to notify users of its solution through JVN.
References
| Type | URL | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-001894.html",
"dc:date": "2023-05-19T15:40+09:00",
"dcterms:issued": "2023-05-19T15:40+09:00",
"dcterms:modified": "2023-05-19T15:40+09:00",
"description": "Android App \"Brother iPrint\u0026Scan\" provided by BROTHER INDUSTRIES, LTD. contains an improper access control vulnerability (CWE-284, CVE-2023-28369).\r\n\r\nJohan Francsics reported this vulnerability to BROTHER INDUSTRIES, LTD. and coordinated. After the coordination, BROTHER INDUSTRIES, LTD. reported this case to JPCERT/CC to notify users of its solution through JVN.",
"link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-001894.html",
"sec:cpe": {
"#text": "cpe:/a:brother:iprint%26scan",
"@product": "Brother iPrint\u0026Scan",
"@vendor": "Brother Industries",
"@version": "2.2"
},
"sec:cvss": {
"@score": "3.3",
"@severity": "Low",
"@type": "Base",
"@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2023-001894",
"sec:references": [
{
"#text": "https://jvn.jp/en/vu/JVNVU97891206/",
"@id": "JVNVU#97891206",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2023-28369",
"@id": "CVE-2023-28369",
"@source": "CVE"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-28369",
"@id": "CVE-2023-28369",
"@source": "NVD"
},
{
"#text": "https://cwe.mitre.org/data/definitions/284.html",
"@id": "CWE-284",
"@title": "Improper Access Control(CWE-284)"
}
],
"title": "Android App \"Brother iPrint\u0026Scan\" vulnerable to improper access control"
}
JVNDB-2017-000160
Vulnerability from jvndb - Published: 2017-07-04 13:59 - Updated:2018-02-07 11:52
Severity
Summary
MFC-J960DWN vulnerable to cross-site request forgery
Details
MFC-J960DWN provided by BROTHER INDUSTRIES, LTD. is a MultiFunction Printer. MFC-J960DWN contains a cross-site request forgery vulnerability (CWE-352).
Taiga Asano reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
| Type | URL | |
|---|---|---|
Impacted products
| Vendor | Product | |
|---|---|---|
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000160.html",
"dc:date": "2018-02-07T11:52+09:00",
"dcterms:issued": "2017-07-04T13:59+09:00",
"dcterms:modified": "2018-02-07T11:52+09:00",
"description": "MFC-J960DWN provided by BROTHER INDUSTRIES, LTD. is a MultiFunction Printer. MFC-J960DWN contains a cross-site request forgery vulnerability (CWE-352).\r\n\r\nTaiga Asano reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
"link": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000160.html",
"sec:cpe": {
"#text": "cpe:/o:brother:mfc-j960dwn_firmware",
"@product": "MFC-J960DWN firmware",
"@vendor": "Brother Industries",
"@version": "2.2"
},
"sec:cvss": [
{
"@score": "4.3",
"@severity": "Medium",
"@type": "Base",
"@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"@version": "2.0"
},
{
"@score": "4.3",
"@severity": "Medium",
"@type": "Base",
"@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"@version": "3.0"
}
],
"sec:identifier": "JVNDB-2017-000160",
"sec:references": [
{
"#text": "http://jvn.jp/en/jp/JVN95996423/index.html",
"@id": "JVN#95996423",
"@source": "JVN"
},
{
"#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2244",
"@id": "CVE-2017-2244",
"@source": "CVE"
},
{
"#text": "https://nvd.nist.gov/vuln/detail/CVE-2017-2244",
"@id": "CVE-2017-2244",
"@source": "NVD"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-352",
"@title": "Cross-Site Request Forgery(CWE-352)"
}
],
"title": "MFC-J960DWN vulnerable to cross-site request forgery"
}
VAR-201707-0335
Vulnerability from variot - Updated: 2025-04-20 23:32Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. MFC-J960DWN provided by BROTHER INDUSTRIES, LTD. is a MultiFunction Printer. MFC-J960DWN contains a cross-site request forgery vulnerability (CWE-352). Taiga Asano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.If a user views a malicious page, unintended operations such as changing settings of the device may be performed. A remote attacker could exploit this vulnerability to perform unauthorized operations
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201707-0335",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-j960dwn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": "d"
},
{
"model": "mfc-j960dwn",
"scope": "lte",
"trust": 0.8,
"vendor": "brother industries",
"version": "ver.d"
},
{
"model": "industries ltd mfc-j960dwn \u003c=ver.d",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j960dwn",
"scope": "eq",
"trust": 0.6,
"vendor": "brother industries",
"version": "d"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
},
{
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:mfc-j960dwn_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
}
]
},
"cve": "CVE-2017-2244",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CVE-2017-2244",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "IPA",
"availabilityImpact": "None",
"baseScore": 4.3,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "JVNDB-2017-000160",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CNVD-2017-21543",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "VHN-110447",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2017-2244",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "IPA",
"availabilityImpact": "None",
"baseScore": 4.3,
"baseSeverity": "Medium",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "JVNDB-2017-000160",
"impactScore": null,
"integrityImpact": "Low",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "Required",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2017-2244",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "IPA",
"id": "JVNDB-2017-000160",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2017-21543",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201707-343",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-110447",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "VULHUB",
"id": "VHN-110447"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
},
{
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. MFC-J960DWN provided by BROTHER INDUSTRIES, LTD. is a MultiFunction Printer. MFC-J960DWN contains a cross-site request forgery vulnerability (CWE-352). Taiga Asano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.If a user views a malicious page, unintended operations such as changing settings of the device may be performed. A remote attacker could exploit this vulnerability to perform unauthorized operations",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-2244"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "VULHUB",
"id": "VHN-110447"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "JVN",
"id": "JVN95996423",
"trust": 3.1
},
{
"db": "NVD",
"id": "CVE-2017-2244",
"trust": 3.1
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2017-21543",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-110447",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "VULHUB",
"id": "VHN-110447"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
},
{
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"id": "VAR-201707-0335",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "VULHUB",
"id": "VHN-110447"
}
],
"trust": 1.7
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
}
]
},
"last_update_date": "2025-04-20T23:32:52.912000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "BROTHER INDUSTRIES, LTD. website",
"trust": 0.8,
"url": "http://support.brother.co.jp/j/s/support/vul_info/JVN95996423/index.html"
},
{
"title": "BrotherIndustriesMFC-J960DWN cross-site request forgery vulnerability patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/100303"
},
{
"title": "Brother Industries MFC-J960DWN Fixes for cross-site request forgery vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=71571"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-352",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-110447"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.1,
"url": "http://jvn.jp/en/jp/jvn95996423/index.html"
},
{
"trust": 1.7,
"url": "http://support.brother.co.jp/j/s/support/vul_info/jvn95996423/index.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-2244"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-2244"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "VULHUB",
"id": "VHN-110447"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
},
{
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "VULHUB",
"id": "VHN-110447"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
},
{
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-08-17T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"date": "2017-07-07T00:00:00",
"db": "VULHUB",
"id": "VHN-110447"
},
{
"date": "2017-07-04T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"date": "2017-07-10T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201707-343"
},
{
"date": "2017-07-07T13:29:01.427000",
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-08-17T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"date": "2017-07-14T00:00:00",
"db": "VULHUB",
"id": "VHN-110447"
},
{
"date": "2018-02-07T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"date": "2021-09-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201707-343"
},
{
"date": "2025-04-20T01:37:25.860000",
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother Industries MFC-J960DWN Cross-Site Request Forgery Vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
}
],
"trust": 1.2
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "cross-site request forgery",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
}
],
"trust": 0.6
}
}
VAR-202003-0790
Vulnerability from variot - Updated: 2024-11-23 22:48Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to execute arbitrary code on the device. plural Brother The printer contains a vulnerability related to out-of-bounds writing.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. Brother Industries HL-L8360CDW is a multi-function printer from Brother Industries, Japan
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202003-0790",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "dcp-j572dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j582n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2552dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2771dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3745cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2551dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5500dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8260cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j815dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-7880dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5945dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6902dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j972n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2386dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-3160cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2713dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-t4000dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6000cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2710dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6200dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2372dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7520dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2371dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2357dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6250dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6997cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2685dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2560dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-b2080dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1910w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2710dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-7180dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7530dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1222we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9570cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5200dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1617nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j774dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2366dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t510w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-9030cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5595dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3230cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-3600w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3730cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8610cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j903n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1223we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5900dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dwxl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j898n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t910dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3770cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5100dnt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5650dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-7195dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-7895dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-3000n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1919nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-3190cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1623we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j3930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-5590dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5102dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2541dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6545dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6950dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2770dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8540dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j2730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-2800w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j738dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2365dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2551dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j805dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2715dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2705dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j973n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2712dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "fax-l2710dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9570cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1218w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwg",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j895dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3750cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j982n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6935dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j3530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5802dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j890dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3710cw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1605dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1911w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3270cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6402dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1618w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "fax-l2700dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3230cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1300dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5502dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-2400n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l6600dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5330dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dwg",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t810w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6545dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1623wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5845dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5630cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j577n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6583cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j805dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5702dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8690cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dwx",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5850dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dwxl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2376dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6202dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l9310cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6995cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2520dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j497dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2717dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2395dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-b2050dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5830dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l8410cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j572n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2390dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6980cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6983cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2340dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j981n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3517cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2707dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6250dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t710w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8260cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1911nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2531dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j893n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3550cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j491dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j995dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6702dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t810w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5100dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9577cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j995dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1915w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j978n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6947dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2730dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2751dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2732dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5202dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2385dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2537dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1615nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1616nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5600dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j978n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2350dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2532dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3510cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9150cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t510w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2712dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwx",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3210cw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2715dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j2330dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2315dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2752dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1622we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-2595dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3551cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6450dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-2560dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2365dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1910we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8530dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8535dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2703dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6300dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1500n\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2361dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6970dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-b7715dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2716dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j690dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9350cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2375dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6100dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1211w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6000dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t4500dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2680w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2340dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5845dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6800dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3290cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3735cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j1100dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j772dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2380dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6945dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j998dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5755dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2352dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5800dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5902dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t710w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j738dwn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1912wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2701dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1916nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2351dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5602dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5200dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-b7720dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j988n\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2560dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j982n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6999cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5652dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j998dwn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2305w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6200dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j973n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5700dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5335dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8900cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8610cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2520dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6300dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6580cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5755dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industries",
"version": "1.20"
},
{
"model": "industries hl-l8360cdw",
"scope": "eq",
"trust": 0.6,
"vendor": "brother",
"version": "1.20"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:hl-l8360cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
}
]
},
"cve": "CVE-2019-13192",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2019-13192",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 10.0,
"confidentialityImpact": "Complete",
"exploitabilityScore": null,
"id": "JVNDB-2019-015083",
"impactScore": null,
"integrityImpact": "Complete",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2020-20738",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-13192",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2019-015083",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-13192",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "JVNDB-2019-015083",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNVD",
"id": "CNVD-2020-20738",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-202003-855",
"trust": 0.6,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-855"
},
{
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to execute arbitrary code on the device. plural Brother The printer contains a vulnerability related to out-of-bounds writing.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. Brother Industries HL-L8360CDW is a multi-function printer from Brother Industries, Japan",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-13192"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "CNVD",
"id": "CNVD-2020-20738"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-13192",
"trust": 3.0
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2020-20738",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202003-855",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-855"
},
{
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"id": "VAR-202003-0790",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
}
],
"trust": 1.4522727272727272
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
}
]
},
"last_update_date": "2024-11-23T22:48:07.476000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "faq00100670_000",
"trust": 0.8,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us\u0026lang=en\u0026prod=group2\u0026faqid=faq00100670_000"
},
{
"title": "Patch for Brother Industries HL-L8360CDW buffer overflow vulnerability (CNVD-2020-20738)",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/212015"
},
{
"title": "Brother HL-L8360CDW Buffer error vulnerability fix",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=112075"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-855"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-787",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-13192"
},
{
"trust": 1.6,
"url": "https://global.brother"
},
{
"trust": 1.6,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us\u0026lang=en\u0026prod=group2\u0026faqid=faq00100670_000"
},
{
"trust": 1.6,
"url": "https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-brother-printers/"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-13192"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-855"
},
{
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-855"
},
{
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"date": "2020-04-03T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"date": "2020-03-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-855"
},
{
"date": "2020-03-13T19:15:15.900000",
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"date": "2020-04-03T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"date": "2020-04-02T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-855"
},
{
"date": "2024-11-21T04:24:24.253000",
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-855"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Brother Out-of-bounds write vulnerabilities in printers",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-855"
}
],
"trust": 0.6
}
}
VAR-202003-0792
Vulnerability from variot - Updated: 2024-11-23 22:41Some Brother printers (such as the HL-L8360CDW v1.20) were affected by different information disclosure vulnerabilities that provided sensitive information to an unauthenticated user who visits a specific URL. plural Brother Printers are vulnerable to information leakage.Information may be obtained. Brother Industries HL-L8360CDW is a multi-function printer from Brother Industries, Japan. The vulnerability stems from network system or product configuration errors during operation
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202003-0792",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "dcp-j572dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j582n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2552dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2771dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3745cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2551dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5500dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8260cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j815dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-7880dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5945dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6902dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j972n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2386dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-3160cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2713dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-t4000dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6000cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2710dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6200dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2372dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7520dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2371dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2357dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6250dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6997cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2685dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2560dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-b2080dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1910w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2710dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-7180dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7530dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1222we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9570cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5200dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1617nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j774dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2366dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t510w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-9030cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5595dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3230cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-3600w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3730cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8610cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j903n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1223we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5900dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dwxl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j898n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t910dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3770cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5100dnt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5650dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-7195dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-7895dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-3000n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1919nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-3190cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1623we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j3930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-5590dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5102dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2541dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6545dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6950dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2770dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8540dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j2730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-2800w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j738dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2365dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2551dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j805dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2715dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2705dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j973n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2712dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "fax-l2710dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9570cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1218w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwg",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j895dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3750cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j982n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6935dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j3530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5802dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j890dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3710cw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1605dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1911w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3270cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6402dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1618w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "fax-l2700dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3230cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1300dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5502dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-2400n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l6600dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5330dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dwg",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t810w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6545dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1623wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5845dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5630cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j577n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6583cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j805dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5702dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8690cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dwx",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5850dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dwxl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2376dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6202dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l9310cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6995cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2520dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j497dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2717dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2395dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-b2050dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5830dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l8410cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j572n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2390dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6980cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6983cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2340dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j981n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3517cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2707dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6250dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t710w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8260cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1911nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2531dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j893n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3550cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j491dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j995dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6702dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t810w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5100dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9577cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j995dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1915w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j978n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6947dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2730dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2751dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2732dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5202dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2385dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2537dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1615nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1616nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5600dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j978n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2350dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2532dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3510cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9150cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t510w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2712dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwx",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3210cw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2715dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j2330dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2315dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2752dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1622we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-2595dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3551cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6450dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-2560dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2365dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1910we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8530dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8535dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2703dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6300dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1500n\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2361dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6970dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-b7715dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2716dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j690dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9350cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2375dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6100dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1211w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6000dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t4500dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2680w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2340dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5845dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6800dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3290cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3735cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j1100dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j772dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2380dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6945dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j998dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5755dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2352dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5800dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5902dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t710w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j738dwn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1912wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2701dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1916nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2351dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5602dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5200dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-b7720dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j988n\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2560dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j982n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6999cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5652dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j998dwn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2305w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6200dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j973n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5700dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5335dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8900cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8610cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2520dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6300dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6580cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5755dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industries",
"version": "1.20"
},
{
"model": "industries hl-l8360cdw",
"scope": "eq",
"trust": 0.6,
"vendor": "brother",
"version": "1.20"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:hl-l8360cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
}
]
},
"cve": "CVE-2019-13194",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2019-13194",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.0,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2019-015069",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2020-20740",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-13194",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2019-015069",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-13194",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "JVNDB-2019-015069",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2020-20740",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-202003-854",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-854"
},
{
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Some Brother printers (such as the HL-L8360CDW v1.20) were affected by different information disclosure vulnerabilities that provided sensitive information to an unauthenticated user who visits a specific URL. plural Brother Printers are vulnerable to information leakage.Information may be obtained. Brother Industries HL-L8360CDW is a multi-function printer from Brother Industries, Japan. The vulnerability stems from network system or product configuration errors during operation",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-13194"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"db": "CNVD",
"id": "CNVD-2020-20740"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-13194",
"trust": 3.0
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2020-20740",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202003-854",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-854"
},
{
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"id": "VAR-202003-0792",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
}
],
"trust": 1.4522727272727272
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
}
]
},
"last_update_date": "2024-11-23T22:41:09.373000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "faq00100670_000",
"trust": 0.8,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us\u0026lang=en\u0026prod=group2\u0026faqid=faq00100670_000"
},
{
"title": "Patch for Brother Industries HL-L8360CDW Information Disclosure Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/212009"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-306",
"trust": 1.0
},
{
"problemtype": "CWE-200",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-13194"
},
{
"trust": 1.6,
"url": "https://global.brother"
},
{
"trust": 1.6,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us\u0026lang=en\u0026prod=group2\u0026faqid=faq00100670_000"
},
{
"trust": 1.6,
"url": "https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-brother-printers/"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-13194"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-854"
},
{
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-854"
},
{
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"date": "2020-04-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"date": "2020-03-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-854"
},
{
"date": "2020-03-13T19:15:16.057000",
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"date": "2020-04-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"date": "2020-04-02T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-854"
},
{
"date": "2024-11-21T04:24:25.323000",
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-854"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother Industries HL-L8360CDW Information Disclosure Vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-854"
}
],
"trust": 1.2
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-854"
}
],
"trust": 0.6
}
}
VAR-202003-0791
Vulnerability from variot - Updated: 2024-11-23 22:16Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parse the cookie value properly. This would allow an attacker to execute arbitrary code on the device. plural Brother The printer contains a vulnerability related to out-of-bounds writing.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. Brother Industries HL-L8360CDW is a multi-function printer from Brother Industries, Japan
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202003-0791",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "dcp-j572dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j582n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2552dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2771dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3745cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2551dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5500dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8260cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j815dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-7880dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5945dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6902dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j972n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2386dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-3160cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2713dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-t4000dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6000cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2710dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6200dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2372dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7520dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2371dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2357dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6250dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6997cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2685dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2560dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-b2080dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1910w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2710dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-7180dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7530dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1222we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9570cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5200dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1617nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j774dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2366dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t510w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-9030cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5595dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3230cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-3600w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3730cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8610cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j903n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1223we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5900dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dwxl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j898n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t910dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3770cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5100dnt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5650dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-7195dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-7895dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-3000n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1919nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-3190cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1623we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j3930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-5590dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5102dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2541dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6545dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6950dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2770dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8540dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j2730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-2800w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j738dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2365dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2551dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j805dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2715dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2705dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j973n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2712dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "fax-l2710dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9570cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1218w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwg",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j895dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3750cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j982n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6935dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j3530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5802dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j890dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3710cw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1605dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1911w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3270cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6402dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1618w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "fax-l2700dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3230cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1300dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5502dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-2400n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l6600dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5330dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dwg",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t810w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6545dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1623wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5845dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5630cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j577n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6583cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j805dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5702dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8690cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dwx",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5850dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dwxl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2376dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6202dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l9310cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6995cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2520dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j497dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2717dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2395dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-b2050dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5830dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l8410cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j572n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2390dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6980cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6983cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2340dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j981n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3517cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2707dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6250dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t710w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8260cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1911nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2531dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j893n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3550cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j491dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j995dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6702dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t810w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5100dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9577cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j995dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1915w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j978n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6947dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2730dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2751dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2732dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5202dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2385dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2537dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1615nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1616nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5600dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j978n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2350dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2532dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3510cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9150cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t510w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2712dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwx",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3210cw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2715dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j2330dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2315dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2752dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1622we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-2595dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3551cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6450dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-2560dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2365dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1910we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8530dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8535dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2703dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6300dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1500n\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2361dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6970dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-b7715dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2716dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j690dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9350cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2375dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6100dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1211w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6000dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t4500dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2680w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2340dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5845dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6800dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3290cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3735cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j1100dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j772dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2380dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6945dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j998dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5755dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2352dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5800dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5902dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t710w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j738dwn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1912wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2701dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1916nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2351dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5602dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5200dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-b7720dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j988n\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2560dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j982n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6999cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5652dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j998dwn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2305w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6200dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j973n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5700dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5335dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8900cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8610cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2520dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6300dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6580cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5755dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industries",
"version": "1.20"
},
{
"model": "industries hl-l8360cdw",
"scope": "eq",
"trust": 0.6,
"vendor": "brother",
"version": "1.20"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:hl-l8360cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
}
]
},
"cve": "CVE-2019-13193",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 9.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.0,
"id": "CVE-2019-13193",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "Single",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 9.0,
"confidentialityImpact": "Complete",
"exploitabilityScore": null,
"id": "JVNDB-2019-015084",
"impactScore": null,
"integrityImpact": "Complete",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 9.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.0,
"id": "CNVD-2020-20739",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2019-13193",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 8.8,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2019-015084",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "Low",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-13193",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "JVNDB-2019-015084",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2020-20739",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-202003-856",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-856"
},
{
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parse the cookie value properly. This would allow an attacker to execute arbitrary code on the device. plural Brother The printer contains a vulnerability related to out-of-bounds writing.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. Brother Industries HL-L8360CDW is a multi-function printer from Brother Industries, Japan",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-13193"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "CNVD",
"id": "CNVD-2020-20739"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-13193",
"trust": 3.0
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2020-20739",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202003-856",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-856"
},
{
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"id": "VAR-202003-0791",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
}
],
"trust": 1.4522727272727272
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
}
]
},
"last_update_date": "2024-11-23T22:16:36.991000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "faq00100670_000",
"trust": 0.8,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us\u0026lang=en\u0026prod=group2\u0026faqid=faq00100670_000"
},
{
"title": "Patch for Brother Industries HL-L8360CDW buffer overflow vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/212011"
},
{
"title": "Brother HL-L8360CDW Buffer error vulnerability fix",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=112076"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-856"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-787",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-13193"
},
{
"trust": 1.6,
"url": "https://global.brother"
},
{
"trust": 1.6,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us\u0026lang=en\u0026prod=group2\u0026faqid=faq00100670_000"
},
{
"trust": 1.6,
"url": "https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-brother-printers/"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-13193"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-856"
},
{
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-856"
},
{
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"date": "2020-04-03T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"date": "2020-03-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-856"
},
{
"date": "2020-03-13T19:15:15.963000",
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"date": "2020-04-03T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"date": "2020-04-02T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-856"
},
{
"date": "2024-11-21T04:24:24.753000",
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-856"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Brother Out-of-bounds write vulnerabilities in printers",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-856"
}
],
"trust": 0.6
}
}
VAR-202002-0517
Vulnerability from variot - Updated: 2024-08-14 13:48Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability which could allow remote attackers to obtain sensitive information. Brother MFC-9970CDW A vulnerability exists in the device firmware regarding improper restrictions on rendered user interface layers or frames.Information may be obtained. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. No detailed vulnerability details are currently available. The Brother MFC-9970CDW printer is prone to an unspecified clickjacking vulnerability. Other attacks are also possible. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
=========================================
Brother MFC-9970CDW Firmware 0D
Date: Jan. 13, 2013
URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html
=========================================
Keywords
=========================================
XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit, Zero Day, Brother MFC-9970 CDW
CVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673, CVE-2013-2674, CVE-2013-2675, CVE-2013-2676
=========================================
Summary
=========================================
A Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in January 2013. This document will introduce and discuss the vulnerability and provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware L Version 1.10 Released on July 9, 2012, and prior versions.
=========================================
Overview
=========================================
Brother Industries, Ltd. is a multinational electronics and electrical equipment company headquartered in Nagoya, Japan. Its products include printers, multifunction printers, sewing machines, large machine tools, label printers, typewriters, fax machines, and other computer-related electronics. Brother distributes its products both under its own name and under OEM agreements with other companies. It produces high-impact color output at impressive print and copy speeds of up to 30ppm and offers flexible connectivity with wireless, Ethernet and USB interfaces. It features a 5" Color Touch Screen display for easy navigation and menu selection. Also, this flagship model offers automatic duplex print/copy/scan/fax and optional high yield toner cartridges to help lower your operating costs \x96 making this all-in-one a smart choice for a business or workgroup.
=========================================
The Bug
=========================================
Reflected Cross Site Scripting, CWE-79
=========================================
Vulnerable Parameters = id , val, kind + Query String
Signature = ">alert(1)
=========================================
Version Identification
=========================================
Brother MFC-9970CDW - Version Identification - Firmware \x93L\x94 Version 1.10
Brother MFC-9970CDW - Version Identification - Firmware \x93G\x94
=========================================
PoC
=========================================
PoC URL
http://my.vulnerable.printer/admin/admin_main.html?id=websettings"> alert(1)
=========================================
CVE Information
=========================================
CVE-2013-2507 is specific to Firmware G.
XSS at:
admin/log_to_net.html id parameter
fax/copy_settings.html kind parameter
CVE-2013-2670 is for the issue that is present in both the Firmware G report and Firmware L.
XSS at:
admin/admin_main.html name of an arbitrarily assigned URL parameter
CVE-2013-2671 is for the XSS issues that are only present in Firmware L.
CVEs for Firmware L:
Cleartext submission of password CVE-2013-2672
Password field with autocomplete enabled CVE-2013-2673
Cross-domain Referer leakage CVE-2013-2674
Frameable response (Clickjacking) CVE-2013-2675
Private IP addresses disclosed CVE-2013-2676
CVSS 2 Score = 4.5
Timeline
Attempt contact via e-mail in January 2013.
Call the Toll Free Support Line in March 2013.
Callback from Vendor in April 2013.
E-mail sent to Vendor in April 2013.
VENDOR UNRESPONSIVE
Published May 3, 2013
Hoyt LLC Research Public Domain Report
http://xss.cx/
=========================================
END
=========================================
-----BEGIN PGP SIGNATURE----- Version: 10.2.0.2526
wsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx 1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv AIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb 4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8 nSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG VQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg== =Ua1o -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202002-0517",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industries",
"version": "1.10"
},
{
"model": "mfc-9970cdw l",
"scope": "eq",
"trust": 0.6,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw frimware l",
"scope": "eq",
"trust": 0.3,
"vendor": "brother",
"version": "1.10"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"db": "BID",
"id": "59724"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:mfc-9970cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hoyt LLC Research",
"sources": [
{
"db": "BID",
"id": "59724"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-200"
}
],
"trust": 0.9
},
"cve": "CVE-2013-2675",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CVE-2013-2675",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 4.3,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2013-007201",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CNVD-2013-05295",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2013-2675",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 6.5,
"baseSeverity": "Medium",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2013-007201",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "Required",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-2675",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "JVNDB-2013-007201",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2013-05295",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201305-200",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-200"
},
{
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability which could allow remote attackers to obtain sensitive information. Brother MFC-9970CDW A vulnerability exists in the device firmware regarding improper restrictions on rendered user interface layers or frames.Information may be obtained. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. No detailed vulnerability details are currently available. The Brother MFC-9970CDW printer is prone to an unspecified clickjacking vulnerability. Other attacks are also possible. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=========================================\n\nBrother MFC-9970CDW Firmware 0D\n\nDate: Jan. 13, 2013\n\nURL:\nhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html\n\n=========================================\n\nKeywords\n\n=========================================\n\nXSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit,\nZero Day, Brother MFC-9970 CDW\n\nCVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673,\nCVE-2013-2674, CVE-2013-2675, CVE-2013-2676\n\n=========================================\n\nSummary\n\n=========================================\n\nA Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in\nJanuary 2013. This document will introduce and discuss the vulnerability\nand provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware\nL Version 1.10 Released on July 9, 2012, and prior versions. \n\n=========================================\n\nOverview\n\n=========================================\n\nBrother Industries, Ltd. is a multinational electronics and electrical\nequipment company headquartered in Nagoya, Japan. Its products include\nprinters, multifunction printers, sewing machines, large machine tools,\nlabel printers, typewriters, fax machines, and other computer-related\nelectronics. Brother distributes its products both under its own name and\nunder OEM agreements with other companies. It produces high-impact color output at impressive\nprint and copy speeds of up to 30ppm and offers flexible connectivity with\nwireless, Ethernet and USB interfaces. It features a 5\" Color Touch Screen\ndisplay for easy navigation and menu selection. Also, this flagship model\noffers automatic duplex print/copy/scan/fax and optional high yield toner\ncartridges to help lower your operating costs \\x96 making this all-in-one a\nsmart choice for a business or workgroup. \n\n=========================================\n\nThe Bug\n\n=========================================\n\nReflected Cross Site Scripting, CWE-79\n\n=========================================\n\nVulnerable Parameters = id , val, kind + Query String\n\nSignature = \"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\n\n=========================================\n\nVersion Identification\n\n=========================================\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93L\\x94 Version\n1.10\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93G\\x94\n\n=========================================\n\nPoC\n\n=========================================\n\nPoC URL\n\nhttp://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e\nalert(1)\u003c/script\u003e\n\n=========================================\n\nCVE Information\n\n=========================================\n\nCVE-2013-2507 is specific to Firmware G. \n\nXSS at:\n\n admin/log_to_net.html id parameter\n\n fax/copy_settings.html kind parameter\n\nCVE-2013-2670 is for the issue that is present in both the Firmware G\nreport and Firmware L. \n\nXSS at:\n\n admin/admin_main.html name of an arbitrarily assigned URL parameter\n\nCVE-2013-2671 is for the XSS issues that are only present in Firmware L. \n\nCVEs for Firmware L:\n\nCleartext submission of password CVE-2013-2672\n\nPassword field with autocomplete enabled CVE-2013-2673\n\nCross-domain Referer leakage CVE-2013-2674\n\nFrameable response (Clickjacking) CVE-2013-2675\n\nPrivate IP addresses disclosed CVE-2013-2676\n\nCVSS 2 Score = 4.5\n\nTimeline\n\nAttempt contact via e-mail in January 2013. \n\nCall the Toll Free Support Line in March 2013. \n\nCallback from Vendor in April 2013. \n\nE-mail sent to Vendor in April 2013. \n\nVENDOR UNRESPONSIVE\n\nPublished May 3, 2013\n\nHoyt LLC Research Public Domain\nReport\n\nhttp://xss.cx/\n\n=========================================\n\nEND\n\n=========================================\n\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: 10.2.0.2526\n\nwsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx\n1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv\nAIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb\n4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8\nnSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG\nVQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg==\n=Ua1o\n-----END PGP SIGNATURE-----\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-2675"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"db": "BID",
"id": "59724"
},
{
"db": "PACKETSTORM",
"id": "121553"
}
],
"trust": 2.52
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-2675",
"trust": 3.4
},
{
"db": "BID",
"id": "59724",
"trust": 2.5
},
{
"db": "PACKETSTORM",
"id": "121553",
"trust": 2.5
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007201",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2013-05295",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201305-200",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"db": "BID",
"id": "59724"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-200"
},
{
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"id": "VAR-202002-0517",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05295"
}
],
"trust": 1.21290324
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05295"
}
]
},
"last_update_date": "2024-08-14T13:48:31.184000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "https://global.brother/en"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-1021",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "http://packetstormsecurity.com/files/121553/brother-mfc-9970cdw-firmware-0d-cross-site-scripting.html"
},
{
"trust": 1.6,
"url": "https://www.securityfocus.com/bid/59724"
},
{
"trust": 1.6,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84092"
},
{
"trust": 1.5,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2675"
},
{
"trust": 1.0,
"url": "http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2675"
},
{
"trust": 0.3,
"url": "http://www.brother.com"
},
{
"trust": 0.3,
"url": "http://www.brother-usa.com/mfc/modeldetail/4/mfc9970cdw/overview#.uyoaxzdi1ch"
},
{
"trust": 0.1,
"url": "http://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e"
},
{
"trust": 0.1,
"url": "http://xss.cx/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2507"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2671"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2674"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2670"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2676"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2672"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2673"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"db": "BID",
"id": "59724"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-200"
},
{
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"db": "BID",
"id": "59724"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-200"
},
{
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59724"
},
{
"date": "2020-02-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"date": "2013-05-08T02:27:54",
"db": "PACKETSTORM",
"id": "121553"
},
{
"date": "2013-05-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-200"
},
{
"date": "2020-02-05T18:15:10.250000",
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59724"
},
{
"date": "2020-02-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"date": "2020-05-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-200"
},
{
"date": "2020-02-11T18:34:27.597000",
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-200"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW Vulnerability in improperly limiting rendered user interface layers or frames in device firmware",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-200"
}
],
"trust": 0.6
}
}
VAR-202002-0515
Vulnerability from variot - Updated: 2024-08-14 13:48Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unauthorized access. (DoS) It may be put into a state. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. The Brother MFC-9970 CDW login page uses the auto-complete feature in the password field by default, allowing an attacker with physical access to more easily access user accounts. A remote attacker could exploit this vulnerability to obtain password information. Brother MFC-9970CDW Printer is prone to a security-bypass weakness. An attacker with physical access can exploit this issue to gain unauthorized access to other user's account. Brother MFC-9970CDW 1.10 firmware L is vulnerable; other versions may also be affected. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
=========================================
Brother MFC-9970CDW Firmware 0D
Date: Jan. 13, 2013
URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html
=========================================
Keywords
=========================================
XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit, Zero Day, Brother MFC-9970 CDW
CVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673, CVE-2013-2674, CVE-2013-2675, CVE-2013-2676
=========================================
Summary
=========================================
A Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in January 2013. This document will introduce and discuss the vulnerability and provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware L Version 1.10 Released on July 9, 2012, and prior versions.
=========================================
Overview
=========================================
Brother Industries, Ltd. is a multinational electronics and electrical equipment company headquartered in Nagoya, Japan. Its products include printers, multifunction printers, sewing machines, large machine tools, label printers, typewriters, fax machines, and other computer-related electronics. Brother distributes its products both under its own name and under OEM agreements with other companies. It produces high-impact color output at impressive print and copy speeds of up to 30ppm and offers flexible connectivity with wireless, Ethernet and USB interfaces. It features a 5" Color Touch Screen display for easy navigation and menu selection. Also, this flagship model offers automatic duplex print/copy/scan/fax and optional high yield toner cartridges to help lower your operating costs \x96 making this all-in-one a smart choice for a business or workgroup.
=========================================
The Bug
=========================================
Reflected Cross Site Scripting, CWE-79
=========================================
Vulnerable Parameters = id , val, kind + Query String
Signature = ">alert(1)
=========================================
Version Identification
=========================================
Brother MFC-9970CDW - Version Identification - Firmware \x93L\x94 Version 1.10
Brother MFC-9970CDW - Version Identification - Firmware \x93G\x94
=========================================
PoC
=========================================
PoC URL
http://my.vulnerable.printer/admin/admin_main.html?id=websettings"> alert(1)
=========================================
CVE Information
=========================================
CVE-2013-2507 is specific to Firmware G.
XSS at:
admin/log_to_net.html id parameter
fax/copy_settings.html kind parameter
CVE-2013-2670 is for the issue that is present in both the Firmware G report and Firmware L.
XSS at:
admin/admin_main.html name of an arbitrarily assigned URL parameter
CVE-2013-2671 is for the XSS issues that are only present in Firmware L.
CVEs for Firmware L:
Cleartext submission of password CVE-2013-2672
Password field with autocomplete enabled CVE-2013-2673
Cross-domain Referer leakage CVE-2013-2674
Frameable response (Clickjacking) CVE-2013-2675
Private IP addresses disclosed CVE-2013-2676
CVSS 2 Score = 4.5
Timeline
Attempt contact via e-mail in January 2013.
Call the Toll Free Support Line in March 2013.
Callback from Vendor in April 2013.
E-mail sent to Vendor in April 2013.
VENDOR UNRESPONSIVE
Published May 3, 2013
Hoyt LLC Research Public Domain Report
http://xss.cx/
=========================================
END
=========================================
-----BEGIN PGP SIGNATURE----- Version: 10.2.0.2526
wsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx 1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv AIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb 4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8 nSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG VQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg== =Ua1o -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202002-0515",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw l",
"scope": "eq",
"trust": 0.9,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industries",
"version": "1.10"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"db": "BID",
"id": "59727"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:mfc-9970cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hoyt LLC",
"sources": [
{
"db": "BID",
"id": "59727"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-197"
}
],
"trust": 0.9
},
"cve": "CVE-2013-2673",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 3.9,
"id": "CVE-2013-2673",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Local",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 4.6,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2013-007164",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2013-05293",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 0.9,
"id": "CVE-2013-2673",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Physical",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 6.8,
"baseSeverity": "Medium",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2013-007164",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-2673",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "JVNDB-2013-007164",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2013-05293",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201305-197",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-197"
},
{
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unauthorized access. (DoS) It may be put into a state. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. The Brother MFC-9970 CDW login page uses the auto-complete feature in the password field by default, allowing an attacker with physical access to more easily access user accounts. A remote attacker could exploit this vulnerability to obtain password information. Brother MFC-9970CDW Printer is prone to a security-bypass weakness. \nAn attacker with physical access can exploit this issue to gain unauthorized access to other user\u0027s account. \nBrother MFC-9970CDW 1.10 firmware L is vulnerable; other versions may also be affected. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=========================================\n\nBrother MFC-9970CDW Firmware 0D\n\nDate: Jan. 13, 2013\n\nURL:\nhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html\n\n=========================================\n\nKeywords\n\n=========================================\n\nXSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit,\nZero Day, Brother MFC-9970 CDW\n\nCVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673,\nCVE-2013-2674, CVE-2013-2675, CVE-2013-2676\n\n=========================================\n\nSummary\n\n=========================================\n\nA Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in\nJanuary 2013. This document will introduce and discuss the vulnerability\nand provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware\nL Version 1.10 Released on July 9, 2012, and prior versions. \n\n=========================================\n\nOverview\n\n=========================================\n\nBrother Industries, Ltd. is a multinational electronics and electrical\nequipment company headquartered in Nagoya, Japan. Its products include\nprinters, multifunction printers, sewing machines, large machine tools,\nlabel printers, typewriters, fax machines, and other computer-related\nelectronics. Brother distributes its products both under its own name and\nunder OEM agreements with other companies. It produces high-impact color output at impressive\nprint and copy speeds of up to 30ppm and offers flexible connectivity with\nwireless, Ethernet and USB interfaces. It features a 5\" Color Touch Screen\ndisplay for easy navigation and menu selection. Also, this flagship model\noffers automatic duplex print/copy/scan/fax and optional high yield toner\ncartridges to help lower your operating costs \\x96 making this all-in-one a\nsmart choice for a business or workgroup. \n\n=========================================\n\nThe Bug\n\n=========================================\n\nReflected Cross Site Scripting, CWE-79\n\n=========================================\n\nVulnerable Parameters = id , val, kind + Query String\n\nSignature = \"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\n\n=========================================\n\nVersion Identification\n\n=========================================\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93L\\x94 Version\n1.10\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93G\\x94\n\n=========================================\n\nPoC\n\n=========================================\n\nPoC URL\n\nhttp://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e\nalert(1)\u003c/script\u003e\n\n=========================================\n\nCVE Information\n\n=========================================\n\nCVE-2013-2507 is specific to Firmware G. \n\nXSS at:\n\n admin/log_to_net.html id parameter\n\n fax/copy_settings.html kind parameter\n\nCVE-2013-2670 is for the issue that is present in both the Firmware G\nreport and Firmware L. \n\nXSS at:\n\n admin/admin_main.html name of an arbitrarily assigned URL parameter\n\nCVE-2013-2671 is for the XSS issues that are only present in Firmware L. \n\nCVEs for Firmware L:\n\nCleartext submission of password CVE-2013-2672\n\nPassword field with autocomplete enabled CVE-2013-2673\n\nCross-domain Referer leakage CVE-2013-2674\n\nFrameable response (Clickjacking) CVE-2013-2675\n\nPrivate IP addresses disclosed CVE-2013-2676\n\nCVSS 2 Score = 4.5\n\nTimeline\n\nAttempt contact via e-mail in January 2013. \n\nCall the Toll Free Support Line in March 2013. \n\nCallback from Vendor in April 2013. \n\nE-mail sent to Vendor in April 2013. \n\nVENDOR UNRESPONSIVE\n\nPublished May 3, 2013\n\nHoyt LLC Research Public Domain\nReport\n\nhttp://xss.cx/\n\n=========================================\n\nEND\n\n=========================================\n\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: 10.2.0.2526\n\nwsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx\n1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv\nAIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb\n4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8\nnSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG\nVQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg==\n=Ua1o\n-----END PGP SIGNATURE-----\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-2673"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"db": "BID",
"id": "59727"
},
{
"db": "PACKETSTORM",
"id": "121553"
}
],
"trust": 2.52
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-2673",
"trust": 3.4
},
{
"db": "BID",
"id": "59727",
"trust": 2.5
},
{
"db": "PACKETSTORM",
"id": "121553",
"trust": 2.5
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007164",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2013-05293",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201305-197",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"db": "BID",
"id": "59727"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-197"
},
{
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"id": "VAR-202002-0515",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05293"
}
],
"trust": 1.21290324
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05293"
}
]
},
"last_update_date": "2024-08-14T13:48:30.658000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "MFC-9970CDW",
"trust": 0.8,
"url": "https://www.brother.co.jp/product/printer/laserprinter/mfc9970cdw/index.aspx"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-863",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "http://packetstormsecurity.com/files/121553/brother-mfc-9970cdw-firmware-0d-cross-site-scripting.html"
},
{
"trust": 1.6,
"url": "https://www.securityfocus.com/bid/59727"
},
{
"trust": 1.5,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2673"
},
{
"trust": 1.0,
"url": "http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2673"
},
{
"trust": 0.3,
"url": "http://www.brother.com"
},
{
"trust": 0.3,
"url": "http://www.brother-usa.com/mfc/modeldetail/4/mfc9970cdw/overview#.uyobsuqdyit"
},
{
"trust": 0.1,
"url": "http://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e"
},
{
"trust": 0.1,
"url": "http://xss.cx/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2507"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2671"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2674"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2670"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2676"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2672"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2675"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"db": "BID",
"id": "59727"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-197"
},
{
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"db": "BID",
"id": "59727"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-197"
},
{
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59727"
},
{
"date": "2020-02-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"date": "2013-05-08T02:27:54",
"db": "PACKETSTORM",
"id": "121553"
},
{
"date": "2013-05-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-197"
},
{
"date": "2020-02-03T18:15:10.960000",
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59727"
},
{
"date": "2020-02-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"date": "2020-05-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-197"
},
{
"date": "2020-02-05T21:13:28.697000",
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "BID",
"id": "59727"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-197"
}
],
"trust": 0.9
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW firmware L Unauthorized authentication vulnerabilities in devices",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-197"
}
],
"trust": 0.6
}
}
VAR-202002-0514
Vulnerability from variot - Updated: 2024-08-14 13:48Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords. Brother MFC-9970CDW Device firmware contains a vulnerability in the protection of inadequate credentials.Information may be obtained. Schneider Electric Magelis XBT HMI is a human interface controller. The Schneider Electric Magelis XBT HMI controller has a default password for configuration upload authentication that allows remote attackers to bypass access restrictions with specially crafted configuration data. Brother MFC-9970CDW Printer is prone to a remote information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information, such as passwords, that may aid in further attacks. ** ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
=========================================
Brother MFC-9970CDW Firmware 0D
Date: Jan. 13, 2013
URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html
=========================================
Keywords
=========================================
XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit, Zero Day, Brother MFC-9970 CDW
CVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673, CVE-2013-2674, CVE-2013-2675, CVE-2013-2676
=========================================
Summary
=========================================
A Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in January 2013. This document will introduce and discuss the vulnerability and provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware L Version 1.10 Released on July 9, 2012, and prior versions.
=========================================
Overview
=========================================
Brother Industries, Ltd. is a multinational electronics and electrical equipment company headquartered in Nagoya, Japan. Its products include printers, multifunction printers, sewing machines, large machine tools, label printers, typewriters, fax machines, and other computer-related electronics. Brother distributes its products both under its own name and under OEM agreements with other companies.
The MFC-9970cdw Color Laser All-in-One combines print, copy, scan and fax in one powerful device. It produces high-impact color output at impressive print and copy speeds of up to 30ppm and offers flexible connectivity with wireless, Ethernet and USB interfaces. It features a 5" Color Touch Screen display for easy navigation and menu selection. Also, this flagship model offers automatic duplex print/copy/scan/fax and optional high yield toner cartridges to help lower your operating costs \x96 making this all-in-one a smart choice for a business or workgroup.
=========================================
The Bug
=========================================
Reflected Cross Site Scripting, CWE-79
=========================================
Vulnerable Parameters = id , val, kind + Query String
Signature = ">alert(1)
=========================================
Version Identification
=========================================
Brother MFC-9970CDW - Version Identification - Firmware \x93L\x94 Version 1.10
Brother MFC-9970CDW - Version Identification - Firmware \x93G\x94
=========================================
PoC
=========================================
PoC URL
http://my.vulnerable.printer/admin/admin_main.html?id=websettings"> alert(1)
=========================================
CVE Information
=========================================
CVE-2013-2507 is specific to Firmware G.
XSS at:
admin/log_to_net.html id parameter
fax/copy_settings.html kind parameter
CVE-2013-2670 is for the issue that is present in both the Firmware G report and Firmware L.
XSS at:
admin/admin_main.html name of an arbitrarily assigned URL parameter
CVE-2013-2671 is for the XSS issues that are only present in Firmware L.
CVEs for Firmware L:
Cleartext submission of password CVE-2013-2672
Password field with autocomplete enabled CVE-2013-2673
Cross-domain Referer leakage CVE-2013-2674
Frameable response (Clickjacking) CVE-2013-2675
Private IP addresses disclosed CVE-2013-2676
CVSS 2 Score = 4.5
Timeline
Attempt contact via e-mail in January 2013.
Call the Toll Free Support Line in March 2013.
Callback from Vendor in April 2013.
E-mail sent to Vendor in April 2013.
VENDOR UNRESPONSIVE
Published May 3, 2013
Hoyt LLC Research Public Domain Report
http://xss.cx/
=========================================
END
=========================================
-----BEGIN PGP SIGNATURE----- Version: 10.2.0.2526
wsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx 1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv AIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb 4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8 nSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG VQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg== =Ua1o -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202002-0514",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw",
"scope": null,
"trust": 0.8,
"vendor": "brother industries",
"version": null
},
{
"model": "electric magelis xbt hmi controller",
"scope": null,
"trust": 0.6,
"vendor": "schneider",
"version": null
},
{
"model": "mfc-9970cdw l",
"scope": "eq",
"trust": 0.3,
"vendor": "brother",
"version": "1.10"
},
{
"model": "electric magelis xbt hmi controller",
"scope": "eq",
"trust": 0.2,
"vendor": "schneider",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"db": "BID",
"id": "59721"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:mfc-9970cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hoyt LLC Research",
"sources": [
{
"db": "BID",
"id": "59721"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-202"
}
],
"trust": 0.9
},
"cve": "CVE-2013-2672",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2013-2672",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.0,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2013-007166",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CNVD-2013-03176",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "0860eb70-2353-11e6-abef-000c29c66e3d",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.9 [IVD]"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2013-2672",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2013-007166",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-2672",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "JVNDB-2013-007166",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2013-03176",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201305-202",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-202"
},
{
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords. Brother MFC-9970CDW Device firmware contains a vulnerability in the protection of inadequate credentials.Information may be obtained. Schneider Electric Magelis XBT HMI is a human interface controller. The Schneider Electric Magelis XBT HMI controller has a default password for configuration upload authentication that allows remote attackers to bypass access restrictions with specially crafted configuration data. Brother MFC-9970CDW Printer is prone to a remote information-disclosure vulnerability. \nSuccessful exploits will allow attackers to obtain sensitive information, such as passwords, that may aid in further attacks. ** ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=========================================\n\nBrother MFC-9970CDW Firmware 0D\n\nDate: Jan. 13, 2013\n\nURL:\nhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html\n\n=========================================\n\nKeywords\n\n=========================================\n\nXSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit,\nZero Day, Brother MFC-9970 CDW\n\nCVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673,\nCVE-2013-2674, CVE-2013-2675, CVE-2013-2676\n\n=========================================\n\nSummary\n\n=========================================\n\nA Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in\nJanuary 2013. This document will introduce and discuss the vulnerability\nand provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware\nL Version 1.10 Released on July 9, 2012, and prior versions. \n\n=========================================\n\nOverview\n\n=========================================\n\nBrother Industries, Ltd. is a multinational electronics and electrical\nequipment company headquartered in Nagoya, Japan. Its products include\nprinters, multifunction printers, sewing machines, large machine tools,\nlabel printers, typewriters, fax machines, and other computer-related\nelectronics. Brother distributes its products both under its own name and\nunder OEM agreements with other companies. \n\n\n\nThe MFC-9970cdw Color Laser All-in-One combines print, copy, scan and fax\nin one powerful device. It produces high-impact color output at impressive\nprint and copy speeds of up to 30ppm and offers flexible connectivity with\nwireless, Ethernet and USB interfaces. It features a 5\" Color Touch Screen\ndisplay for easy navigation and menu selection. Also, this flagship model\noffers automatic duplex print/copy/scan/fax and optional high yield toner\ncartridges to help lower your operating costs \\x96 making this all-in-one a\nsmart choice for a business or workgroup. \n\n=========================================\n\nThe Bug\n\n=========================================\n\nReflected Cross Site Scripting, CWE-79\n\n=========================================\n\nVulnerable Parameters = id , val, kind + Query String\n\nSignature = \"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\n\n=========================================\n\nVersion Identification\n\n=========================================\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93L\\x94 Version\n1.10\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93G\\x94\n\n=========================================\n\nPoC\n\n=========================================\n\nPoC URL\n\nhttp://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e\nalert(1)\u003c/script\u003e\n\n=========================================\n\nCVE Information\n\n=========================================\n\nCVE-2013-2507 is specific to Firmware G. \n\nXSS at:\n\n admin/log_to_net.html id parameter\n\n fax/copy_settings.html kind parameter\n\nCVE-2013-2670 is for the issue that is present in both the Firmware G\nreport and Firmware L. \n\nXSS at:\n\n admin/admin_main.html name of an arbitrarily assigned URL parameter\n\nCVE-2013-2671 is for the XSS issues that are only present in Firmware L. \n\nCVEs for Firmware L:\n\nCleartext submission of password CVE-2013-2672\n\nPassword field with autocomplete enabled CVE-2013-2673\n\nCross-domain Referer leakage CVE-2013-2674\n\nFrameable response (Clickjacking) CVE-2013-2675\n\nPrivate IP addresses disclosed CVE-2013-2676\n\nCVSS 2 Score = 4.5\n\nTimeline\n\nAttempt contact via e-mail in January 2013. \n\nCall the Toll Free Support Line in March 2013. \n\nCallback from Vendor in April 2013. \n\nE-mail sent to Vendor in April 2013. \n\nVENDOR UNRESPONSIVE\n\nPublished May 3, 2013\n\nHoyt LLC Research Public Domain\nReport\n\nhttp://xss.cx/\n\n=========================================\n\nEND\n\n=========================================\n\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: 10.2.0.2526\n\nwsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx\n1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv\nAIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb\n4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8\nnSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG\nVQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg==\n=Ua1o\n-----END PGP SIGNATURE-----\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-2672"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"db": "BID",
"id": "59721"
},
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "PACKETSTORM",
"id": "121553"
}
],
"trust": 2.7
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-2672",
"trust": 3.6
},
{
"db": "PACKETSTORM",
"id": "121553",
"trust": 2.5
},
{
"db": "CNVD",
"id": "CNVD-2013-03176",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201305-202",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007166",
"trust": 0.8
},
{
"db": "BID",
"id": "58953",
"trust": 0.6
},
{
"db": "BID",
"id": "59721",
"trust": 0.3
},
{
"db": "IVD",
"id": "0860EB70-2353-11E6-ABEF-000C29C66E3D",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"db": "BID",
"id": "59721"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-202"
},
{
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"id": "VAR-202002-0514",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
}
],
"trust": 1.60645162
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
}
]
},
"last_update_date": "2024-08-14T13:48:30.579000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "https://global.brother/en"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-522",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "http://packetstormsecurity.com/files/121553/brother-mfc-9970cdw-firmware-0d-cross-site-scripting.html"
},
{
"trust": 1.6,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84094"
},
{
"trust": 1.5,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2672"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2672"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/bid/58953"
},
{
"trust": 0.4,
"url": "http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html"
},
{
"trust": 0.3,
"url": "http://www.brother.com"
},
{
"trust": 0.3,
"url": "http://www.brother-usa.com/mfc/modeldetail/4/mfc9970cdw/overview#.uyobsuqdyit"
},
{
"trust": 0.1,
"url": "http://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e"
},
{
"trust": 0.1,
"url": "http://xss.cx/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2507"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2671"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2674"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2670"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2676"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2675"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2673"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"db": "BID",
"id": "59721"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-202"
},
{
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"db": "BID",
"id": "59721"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-202"
},
{
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-04-16T00:00:00",
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"date": "2013-04-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59721"
},
{
"date": "2020-02-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"date": "2013-05-08T02:27:54",
"db": "PACKETSTORM",
"id": "121553"
},
{
"date": "2013-05-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-202"
},
{
"date": "2020-02-03T17:15:12.033000",
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-28T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59721"
},
{
"date": "2020-02-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"date": "2020-05-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-202"
},
{
"date": "2020-02-05T20:49:11.063000",
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-202"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Schneider Electric Magelis XBT HMI Controller Remote Security Bypass Vulnerability",
"sources": [
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-202"
}
],
"trust": 0.6
}
}
VAR-202002-0518
Vulnerability from variot - Updated: 2024-08-14 13:48Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP addresses and other sensitive information. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. Brother MFC-9970CDW Printer is prone to a remote information-disclosure vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
=========================================
Brother MFC-9970CDW Firmware 0D
Date: Jan. 13, 2013
URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html
=========================================
Keywords
=========================================
XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit, Zero Day, Brother MFC-9970 CDW
CVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673, CVE-2013-2674, CVE-2013-2675, CVE-2013-2676
=========================================
Summary
=========================================
A Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in January 2013. This document will introduce and discuss the vulnerability and provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware L Version 1.10 Released on July 9, 2012, and prior versions.
=========================================
Overview
=========================================
Brother Industries, Ltd. is a multinational electronics and electrical equipment company headquartered in Nagoya, Japan. Its products include printers, multifunction printers, sewing machines, large machine tools, label printers, typewriters, fax machines, and other computer-related electronics. Brother distributes its products both under its own name and under OEM agreements with other companies. It produces high-impact color output at impressive print and copy speeds of up to 30ppm and offers flexible connectivity with wireless, Ethernet and USB interfaces. It features a 5" Color Touch Screen display for easy navigation and menu selection. Also, this flagship model offers automatic duplex print/copy/scan/fax and optional high yield toner cartridges to help lower your operating costs \x96 making this all-in-one a smart choice for a business or workgroup.
=========================================
The Bug
=========================================
Reflected Cross Site Scripting, CWE-79
=========================================
Vulnerable Parameters = id , val, kind + Query String
Signature = ">alert(1)
=========================================
Version Identification
=========================================
Brother MFC-9970CDW - Version Identification - Firmware \x93L\x94 Version 1.10
Brother MFC-9970CDW - Version Identification - Firmware \x93G\x94
=========================================
PoC
=========================================
PoC URL
http://my.vulnerable.printer/admin/admin_main.html?id=websettings"> alert(1)
=========================================
CVE Information
=========================================
CVE-2013-2507 is specific to Firmware G.
XSS at:
admin/log_to_net.html id parameter
fax/copy_settings.html kind parameter
CVE-2013-2670 is for the issue that is present in both the Firmware G report and Firmware L.
XSS at:
admin/admin_main.html name of an arbitrarily assigned URL parameter
CVE-2013-2671 is for the XSS issues that are only present in Firmware L.
CVEs for Firmware L:
Cleartext submission of password CVE-2013-2672
Password field with autocomplete enabled CVE-2013-2673
Cross-domain Referer leakage CVE-2013-2674
Frameable response (Clickjacking) CVE-2013-2675
Private IP addresses disclosed CVE-2013-2676
CVSS 2 Score = 4.5
Timeline
Attempt contact via e-mail in January 2013.
Call the Toll Free Support Line in March 2013.
Callback from Vendor in April 2013.
E-mail sent to Vendor in April 2013.
VENDOR UNRESPONSIVE
Published May 3, 2013
Hoyt LLC Research Public Domain Report
http://xss.cx/
=========================================
END
=========================================
-----BEGIN PGP SIGNATURE----- Version: 10.2.0.2526
wsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx 1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv AIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb 4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8 nSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG VQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg== =Ua1o -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202002-0518",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw l",
"scope": "eq",
"trust": 0.9,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industries",
"version": "1.10"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"db": "BID",
"id": "59726"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:mfc-9970cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hoyt LLC Research",
"sources": [
{
"db": "BID",
"id": "59726"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
}
],
"trust": 0.9
},
"cve": "CVE-2013-2676",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2013-2676",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.1,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.0,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2013-007222",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2013-05296",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2013-2676",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2013-007222",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-2676",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "JVNDB-2013-007222",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2013-05296",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201305-198",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2013-2676",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"db": "VULMON",
"id": "CVE-2013-2676"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
},
{
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP addresses and other sensitive information. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. Brother MFC-9970CDW Printer is prone to a remote information-disclosure vulnerability. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=========================================\n\nBrother MFC-9970CDW Firmware 0D\n\nDate: Jan. 13, 2013\n\nURL:\nhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html\n\n=========================================\n\nKeywords\n\n=========================================\n\nXSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit,\nZero Day, Brother MFC-9970 CDW\n\nCVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673,\nCVE-2013-2674, CVE-2013-2675, CVE-2013-2676\n\n=========================================\n\nSummary\n\n=========================================\n\nA Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in\nJanuary 2013. This document will introduce and discuss the vulnerability\nand provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware\nL Version 1.10 Released on July 9, 2012, and prior versions. \n\n=========================================\n\nOverview\n\n=========================================\n\nBrother Industries, Ltd. is a multinational electronics and electrical\nequipment company headquartered in Nagoya, Japan. Its products include\nprinters, multifunction printers, sewing machines, large machine tools,\nlabel printers, typewriters, fax machines, and other computer-related\nelectronics. Brother distributes its products both under its own name and\nunder OEM agreements with other companies. It produces high-impact color output at impressive\nprint and copy speeds of up to 30ppm and offers flexible connectivity with\nwireless, Ethernet and USB interfaces. It features a 5\" Color Touch Screen\ndisplay for easy navigation and menu selection. Also, this flagship model\noffers automatic duplex print/copy/scan/fax and optional high yield toner\ncartridges to help lower your operating costs \\x96 making this all-in-one a\nsmart choice for a business or workgroup. \n\n=========================================\n\nThe Bug\n\n=========================================\n\nReflected Cross Site Scripting, CWE-79\n\n=========================================\n\nVulnerable Parameters = id , val, kind + Query String\n\nSignature = \"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\n\n=========================================\n\nVersion Identification\n\n=========================================\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93L\\x94 Version\n1.10\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93G\\x94\n\n=========================================\n\nPoC\n\n=========================================\n\nPoC URL\n\nhttp://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e\nalert(1)\u003c/script\u003e\n\n=========================================\n\nCVE Information\n\n=========================================\n\nCVE-2013-2507 is specific to Firmware G. \n\nXSS at:\n\n admin/log_to_net.html id parameter\n\n fax/copy_settings.html kind parameter\n\nCVE-2013-2670 is for the issue that is present in both the Firmware G\nreport and Firmware L. \n\nXSS at:\n\n admin/admin_main.html name of an arbitrarily assigned URL parameter\n\nCVE-2013-2671 is for the XSS issues that are only present in Firmware L. \n\nCVEs for Firmware L:\n\nCleartext submission of password CVE-2013-2672\n\nPassword field with autocomplete enabled CVE-2013-2673\n\nCross-domain Referer leakage CVE-2013-2674\n\nFrameable response (Clickjacking) CVE-2013-2675\n\nPrivate IP addresses disclosed CVE-2013-2676\n\nCVSS 2 Score = 4.5\n\nTimeline\n\nAttempt contact via e-mail in January 2013. \n\nCall the Toll Free Support Line in March 2013. \n\nCallback from Vendor in April 2013. \n\nE-mail sent to Vendor in April 2013. \n\nVENDOR UNRESPONSIVE\n\nPublished May 3, 2013\n\nHoyt LLC Research Public Domain\nReport\n\nhttp://xss.cx/\n\n=========================================\n\nEND\n\n=========================================\n\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: 10.2.0.2526\n\nwsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx\n1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv\nAIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb\n4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8\nnSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG\nVQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg==\n=Ua1o\n-----END PGP SIGNATURE-----\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-2676"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"db": "BID",
"id": "59726"
},
{
"db": "VULMON",
"id": "CVE-2013-2676"
},
{
"db": "PACKETSTORM",
"id": "121553"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-2676",
"trust": 3.5
},
{
"db": "BID",
"id": "59726",
"trust": 3.4
},
{
"db": "PACKETSTORM",
"id": "121553",
"trust": 1.8
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007222",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2013-05296",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201305-198",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2013-2676",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"db": "VULMON",
"id": "CVE-2013-2676"
},
{
"db": "BID",
"id": "59726"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
},
{
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"id": "VAR-202002-0518",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
}
],
"trust": 1.21290324
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
}
]
},
"last_update_date": "2024-08-14T13:48:30.494000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "https://global.brother/en"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.6,
"url": "https://www.securityfocus.com/bid/59726"
},
{
"trust": 1.7,
"url": "http://packetstormsecurity.com/files/121553/brother-mfc-9970cdw-firmware-0d-cross-site-scripting.html"
},
{
"trust": 1.7,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84090"
},
{
"trust": 1.5,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2676"
},
{
"trust": 1.0,
"url": "http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2676"
},
{
"trust": 0.3,
"url": "http://www.brother.com"
},
{
"trust": 0.3,
"url": "http://www.brother-usa.com/mfc/modeldetail/4/mfc9970cdw/overview#.uyobsuqdyit"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/200.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "http://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e"
},
{
"trust": 0.1,
"url": "http://xss.cx/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2507"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2671"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2674"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2670"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2672"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2675"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2673"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"db": "VULMON",
"id": "CVE-2013-2676"
},
{
"db": "BID",
"id": "59726"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
},
{
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"db": "VULMON",
"id": "CVE-2013-2676"
},
{
"db": "BID",
"id": "59726"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
},
{
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"date": "2020-02-04T00:00:00",
"db": "VULMON",
"id": "CVE-2013-2676"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59726"
},
{
"date": "2020-02-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"date": "2013-05-08T02:27:54",
"db": "PACKETSTORM",
"id": "121553"
},
{
"date": "2013-05-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-198"
},
{
"date": "2020-02-04T15:15:11.287000",
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"date": "2020-02-12T00:00:00",
"db": "VULMON",
"id": "CVE-2013-2676"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59726"
},
{
"date": "2020-02-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"date": "2020-05-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-198"
},
{
"date": "2020-02-12T14:59:59.060000",
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW Information Disclosure Vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
}
],
"trust": 1.2
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
}
],
"trust": 0.6
}
}
VAR-202002-0516
Vulnerability from variot - Updated: 2024-08-14 13:48Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive information from referrer logs due to inadequate handling of HTTP referrer headers. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. A security vulnerability exists in the Brother MFC-9970CDW that allows remote attackers to exploit vulnerabilities to gain access to cross-domain referers. No detailed vulnerability details are currently available. Brother MFC-9970CDW Printer is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information. This may aid in further attacks. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
=========================================
Brother MFC-9970CDW Firmware 0D
Date: Jan. 13, 2013
URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html
=========================================
Keywords
=========================================
XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit, Zero Day, Brother MFC-9970 CDW
CVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673, CVE-2013-2674, CVE-2013-2675, CVE-2013-2676
=========================================
Summary
=========================================
A Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in January 2013. This document will introduce and discuss the vulnerability and provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware L Version 1.10 Released on July 9, 2012, and prior versions.
=========================================
Overview
=========================================
Brother Industries, Ltd. is a multinational electronics and electrical equipment company headquartered in Nagoya, Japan. Its products include printers, multifunction printers, sewing machines, large machine tools, label printers, typewriters, fax machines, and other computer-related electronics. Brother distributes its products both under its own name and under OEM agreements with other companies. It produces high-impact color output at impressive print and copy speeds of up to 30ppm and offers flexible connectivity with wireless, Ethernet and USB interfaces. It features a 5" Color Touch Screen display for easy navigation and menu selection. Also, this flagship model offers automatic duplex print/copy/scan/fax and optional high yield toner cartridges to help lower your operating costs \x96 making this all-in-one a smart choice for a business or workgroup.
=========================================
The Bug
=========================================
Reflected Cross Site Scripting, CWE-79
=========================================
Vulnerable Parameters = id , val, kind + Query String
Signature = ">alert(1)
=========================================
Version Identification
=========================================
Brother MFC-9970CDW - Version Identification - Firmware \x93L\x94 Version 1.10
Brother MFC-9970CDW - Version Identification - Firmware \x93G\x94
=========================================
PoC
=========================================
PoC URL
http://my.vulnerable.printer/admin/admin_main.html?id=websettings"> alert(1)
=========================================
CVE Information
=========================================
CVE-2013-2507 is specific to Firmware G.
XSS at:
admin/log_to_net.html id parameter
fax/copy_settings.html kind parameter
CVE-2013-2670 is for the issue that is present in both the Firmware G report and Firmware L.
XSS at:
admin/admin_main.html name of an arbitrarily assigned URL parameter
CVE-2013-2671 is for the XSS issues that are only present in Firmware L.
CVEs for Firmware L:
Cleartext submission of password CVE-2013-2672
Password field with autocomplete enabled CVE-2013-2673
Cross-domain Referer leakage CVE-2013-2674
Frameable response (Clickjacking) CVE-2013-2675
Private IP addresses disclosed CVE-2013-2676
CVSS 2 Score = 4.5
Timeline
Attempt contact via e-mail in January 2013.
Call the Toll Free Support Line in March 2013.
Callback from Vendor in April 2013.
E-mail sent to Vendor in April 2013.
VENDOR UNRESPONSIVE
Published May 3, 2013
Hoyt LLC Research Public Domain Report
http://xss.cx/
=========================================
END
=========================================
-----BEGIN PGP SIGNATURE----- Version: 10.2.0.2526
wsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx 1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv AIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb 4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8 nSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG VQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg== =Ua1o -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202002-0516",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw l",
"scope": "eq",
"trust": 0.9,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industries",
"version": "1.10"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"db": "BID",
"id": "59725"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:mfc-9970cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hoyt LLC",
"sources": [
{
"db": "BID",
"id": "59725"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-199"
}
],
"trust": 0.9
},
"cve": "CVE-2013-2674",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2013-2674",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.0,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2013-007165",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2013-05294",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2013-2674",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2013-007165",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-2674",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "JVNDB-2013-007165",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2013-05294",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201305-199",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-199"
},
{
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive information from referrer logs due to inadequate handling of HTTP referrer headers. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. A security vulnerability exists in the Brother MFC-9970CDW that allows remote attackers to exploit vulnerabilities to gain access to cross-domain referers. No detailed vulnerability details are currently available. Brother MFC-9970CDW Printer is prone to an information-disclosure vulnerability. \nAttackers can exploit this issue to obtain sensitive information. This may aid in further attacks. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=========================================\n\nBrother MFC-9970CDW Firmware 0D\n\nDate: Jan. 13, 2013\n\nURL:\nhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html\n\n=========================================\n\nKeywords\n\n=========================================\n\nXSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit,\nZero Day, Brother MFC-9970 CDW\n\nCVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673,\nCVE-2013-2674, CVE-2013-2675, CVE-2013-2676\n\n=========================================\n\nSummary\n\n=========================================\n\nA Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in\nJanuary 2013. This document will introduce and discuss the vulnerability\nand provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware\nL Version 1.10 Released on July 9, 2012, and prior versions. \n\n=========================================\n\nOverview\n\n=========================================\n\nBrother Industries, Ltd. is a multinational electronics and electrical\nequipment company headquartered in Nagoya, Japan. Its products include\nprinters, multifunction printers, sewing machines, large machine tools,\nlabel printers, typewriters, fax machines, and other computer-related\nelectronics. Brother distributes its products both under its own name and\nunder OEM agreements with other companies. It produces high-impact color output at impressive\nprint and copy speeds of up to 30ppm and offers flexible connectivity with\nwireless, Ethernet and USB interfaces. It features a 5\" Color Touch Screen\ndisplay for easy navigation and menu selection. Also, this flagship model\noffers automatic duplex print/copy/scan/fax and optional high yield toner\ncartridges to help lower your operating costs \\x96 making this all-in-one a\nsmart choice for a business or workgroup. \n\n=========================================\n\nThe Bug\n\n=========================================\n\nReflected Cross Site Scripting, CWE-79\n\n=========================================\n\nVulnerable Parameters = id , val, kind + Query String\n\nSignature = \"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\n\n=========================================\n\nVersion Identification\n\n=========================================\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93L\\x94 Version\n1.10\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93G\\x94\n\n=========================================\n\nPoC\n\n=========================================\n\nPoC URL\n\nhttp://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e\nalert(1)\u003c/script\u003e\n\n=========================================\n\nCVE Information\n\n=========================================\n\nCVE-2013-2507 is specific to Firmware G. \n\nXSS at:\n\n admin/log_to_net.html id parameter\n\n fax/copy_settings.html kind parameter\n\nCVE-2013-2670 is for the issue that is present in both the Firmware G\nreport and Firmware L. \n\nXSS at:\n\n admin/admin_main.html name of an arbitrarily assigned URL parameter\n\nCVE-2013-2671 is for the XSS issues that are only present in Firmware L. \n\nCVEs for Firmware L:\n\nCleartext submission of password CVE-2013-2672\n\nPassword field with autocomplete enabled CVE-2013-2673\n\nCross-domain Referer leakage CVE-2013-2674\n\nFrameable response (Clickjacking) CVE-2013-2675\n\nPrivate IP addresses disclosed CVE-2013-2676\n\nCVSS 2 Score = 4.5\n\nTimeline\n\nAttempt contact via e-mail in January 2013. \n\nCall the Toll Free Support Line in March 2013. \n\nCallback from Vendor in April 2013. \n\nE-mail sent to Vendor in April 2013. \n\nVENDOR UNRESPONSIVE\n\nPublished May 3, 2013\n\nHoyt LLC Research Public Domain\nReport\n\nhttp://xss.cx/\n\n=========================================\n\nEND\n\n=========================================\n\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: 10.2.0.2526\n\nwsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx\n1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv\nAIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb\n4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8\nnSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG\nVQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg==\n=Ua1o\n-----END PGP SIGNATURE-----\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-2674"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"db": "BID",
"id": "59725"
},
{
"db": "PACKETSTORM",
"id": "121553"
}
],
"trust": 2.52
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-2674",
"trust": 3.4
},
{
"db": "BID",
"id": "59725",
"trust": 2.5
},
{
"db": "PACKETSTORM",
"id": "121553",
"trust": 2.5
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007165",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2013-05294",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201305-199",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"db": "BID",
"id": "59725"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-199"
},
{
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"id": "VAR-202002-0516",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05294"
}
],
"trust": 1.21290324
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05294"
}
]
},
"last_update_date": "2024-08-14T13:48:30.457000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "MFC-9970CDW",
"trust": 0.8,
"url": "https://www.brother.co.jp/product/printer/laserprinter/mfc9970cdw/index.aspx"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "http://packetstormsecurity.com/files/121553/brother-mfc-9970cdw-firmware-0d-cross-site-scripting.html"
},
{
"trust": 1.6,
"url": "https://www.securityfocus.com/bid/59725"
},
{
"trust": 1.6,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84091"
},
{
"trust": 1.5,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2674"
},
{
"trust": 1.0,
"url": "http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2674"
},
{
"trust": 0.3,
"url": "http://www.brother.com"
},
{
"trust": 0.3,
"url": "http://www.brother-usa.com/mfc/modeldetail/4/mfc9970cdw/overview#.uyoaxzdi1ch"
},
{
"trust": 0.1,
"url": "http://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e"
},
{
"trust": 0.1,
"url": "http://xss.cx/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2507"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2671"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2670"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2676"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2672"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2675"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2673"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"db": "BID",
"id": "59725"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-199"
},
{
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"db": "BID",
"id": "59725"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-199"
},
{
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59725"
},
{
"date": "2020-02-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"date": "2013-05-08T02:27:54",
"db": "PACKETSTORM",
"id": "121553"
},
{
"date": "2013-05-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-199"
},
{
"date": "2020-02-03T18:15:11.023000",
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59725"
},
{
"date": "2020-02-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"date": "2020-05-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-199"
},
{
"date": "2020-02-05T20:32:11.250000",
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-199"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW firmware L Information leakage vulnerabilities in devices",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-199"
}
],
"trust": 0.6
}
}