Search
Find a vulnerability
Search criteria
43 vulnerabilities by brother
CVE-2021-47985 (GCVE-0-2021-47985)
Vulnerability from nvd – Published: 2026-06-19 14:16 – Updated: 2026-06-22 19:34
VLAI
EPSS
VEX
Title
Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation
Summary
Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Attackers can place a malicious executable in the Program Files directory path to be executed with LocalSystem privileges when the service starts automatically.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-428 - Unquoted Search Path or Element
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.exploit-db.com/exploits/50061 | exploit |
| https://brother.com/ | product |
| https://www.vulncheck.com/advisories/brother-saps… | third-party-advisory |
Date Public
2021-06-21 00:00
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2021-47985",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-22T19:34:48.865563Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-22T19:34:55.391Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "SAPSprint",
"vendor": "Brother",
"versions": [
{
"status": "affected",
"version": "7.60"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Brian Rodriguez"
}
],
"datePublic": "2021-06-21T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Attackers can place a malicious executable in the Program Files directory path to be executed with LocalSystem privileges when the service starts automatically."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-428",
"description": "Unquoted Search Path or Element",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-19T14:16:52.808Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "ExploitDB-50061",
"tags": [
"exploit"
],
"url": "https://www.exploit-db.com/exploits/50061"
},
{
"name": "Official Product Homepage",
"tags": [
"product"
],
"url": "https://brother.com/"
},
{
"name": "VulnCheck Advisory: Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/brother-sapsprint-unquoted-service-path-privilege-escalation"
}
],
"title": "Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation",
"x_generator": {
"engine": "vulncheck"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2021-47985",
"datePublished": "2026-06-19T14:16:52.808Z",
"dateReserved": "2026-06-19T13:09:21.117Z",
"dateUpdated": "2026-06-22T19:34:55.391Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2020-36929 (GCVE-0-2020-36929)
Vulnerability from nvd – Published: 2026-01-15 23:25 – Updated: 2026-01-16 16:52
VLAI
EPSS
VEX
Title
Brother BRPrint Auditor 3.0.7 - 'Multiple' Unquoted Service Path
Summary
Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted file paths in BrAuSvc and BRPA_Agent services to inject malicious executables and escalate privileges on the system.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-428 - Unquoted Search Path or Element
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://www.exploit-db.com/exploits/50005 | exploit |
| https://support.brother.com/g/s/id/common_downloa… | product |
| https://support.brother.com/g/s/id/common_downloa… | product |
| https://www.vulncheck.com/advisories/brother-brpr… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Support | Brother BRPrint Auditor |
Affected:
3.0.7
|
Date Public
2021-06-14 00:00
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2020-36929",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-16T16:36:43.763677Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-16T16:52:48.820Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://www.exploit-db.com/exploits/50005"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Brother BRPrint Auditor",
"vendor": "Support",
"versions": [
{
"status": "affected",
"version": "3.0.7"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Brian Rodriguez"
}
],
"datePublic": "2021-06-14T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted file paths in BrAuSvc and BRPA_Agent services to inject malicious executables and escalate privileges on the system."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-428",
"description": "Unquoted Search Path or Element",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-15T23:25:34.881Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "ExploitDB-50005",
"tags": [
"exploit"
],
"url": "https://www.exploit-db.com/exploits/50005"
},
{
"name": "Brother BRPrint Auditor Download Page (NL)",
"tags": [
"product"
],
"url": "https://support.brother.com/g/s/id/common_download/en/auditor_pro3.html?c=be\u0026lang=nl\u0026redirect=on"
},
{
"name": "Brother BRPrint Auditor Download Page (FR)",
"tags": [
"product"
],
"url": "https://support.brother.com/g/s/id/common_download/en/auditor_pro3.html?c=be\u0026lang=fr\u0026redirect=on"
},
{
"name": "VulnCheck Advisory: Brother BRPrint Auditor 3.0.7 - \u0027Multiple\u0027 Unquoted Service Path",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/brother-brprint-auditor-multiple-unquoted-service-path"
}
],
"title": "Brother BRPrint Auditor 3.0.7 - \u0027Multiple\u0027 Unquoted Service Path",
"x_generator": {
"engine": "vulncheck"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2020-36929",
"datePublished": "2026-01-15T23:25:34.881Z",
"dateReserved": "2026-01-10T13:50:35.693Z",
"dateUpdated": "2026-01-16T16:52:48.820Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2020-36928 (GCVE-0-2020-36928)
Vulnerability from nvd – Published: 2026-01-15 23:25 – Updated: 2026-01-16 16:53
VLAI
EPSS
VEX
Title
Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Path
Summary
Brother BRAgent 1.38 contains an unquoted service path vulnerability in the WBA_Agent_Client service running with LocalSystem privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Brother\BRAgent\ to inject and execute malicious code with elevated system permissions.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-428 - Unquoted Search Path or Element
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.exploit-db.com/exploits/50010 | exploit |
| https://help.brother-usa.com/app/answers/detail/a… | product |
| https://www.vulncheck.com/advisories/brother-brag… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Brother | Brother BRAgent |
Affected:
1.38
|
Date Public
2021-06-14 00:00
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2020-36928",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-16T16:53:09.408804Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-16T16:53:34.686Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://www.exploit-db.com/exploits/50010"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Brother BRAgent",
"vendor": "Brother",
"versions": [
{
"status": "affected",
"version": "1.38"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Brian Rodriguez"
}
],
"datePublic": "2021-06-14T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Brother BRAgent 1.38 contains an unquoted service path vulnerability in the WBA_Agent_Client service running with LocalSystem privileges. Attackers can exploit the unquoted path in C:\\Program Files (x86)\\Brother\\BRAgent\\ to inject and execute malicious code with elevated system permissions."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-428",
"description": "Unquoted Search Path or Element",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-15T23:25:34.323Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "ExploitDB-50010",
"tags": [
"exploit"
],
"url": "https://www.exploit-db.com/exploits/50010"
},
{
"name": "BRAgent Webpage",
"tags": [
"product"
],
"url": "https://help.brother-usa.com/app/answers/detail/a_id/174732/~/what-is-bragent%3F"
},
{
"name": "VulnCheck Advisory: Brother BRAgent 1.38 - \u0027WBA_Agent_Client\u0027 Unquoted Service Path",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/brother-bragent-wbaagentclient-unquoted-service-path"
}
],
"title": "Brother BRAgent 1.38 - \u0027WBA_Agent_Client\u0027 Unquoted Service Path",
"x_generator": {
"engine": "vulncheck"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2020-36928",
"datePublished": "2026-01-15T23:25:34.323Z",
"dateReserved": "2026-01-10T13:50:35.693Z",
"dateUpdated": "2026-01-16T16:53:34.686Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2023-51654 (GCVE-0-2023-51654)
Vulnerability from nvd – Published: 2023-12-26 05:33 – Updated: 2024-08-02 22:40
VLAI
EPSS
VEX
Summary
Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by a malicious user may cause a Denial-of-service (DoS) condition on the PC.
Severity
No CVSS data available.
CWE
- Improper Link Resolution Before File Access ('Link Following')
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://jvn.jp/en/vu/JVNVU97943829/ |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Brother Industries, Ltd. | iPrint&Scan Desktop for Windows |
Affected:
11.0.0 and earlier
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T22:40:33.847Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/vu/JVNVU97943829/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "iPrint\u0026Scan Desktop for Windows",
"vendor": "Brother Industries, Ltd.",
"versions": [
{
"status": "affected",
"version": "11.0.0 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper link resolution before file access (\u0027Link Following\u0027) issue exists in iPrint\u0026Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by a malicious user may cause a Denial-of-service (DoS) condition on the PC."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-12-26T05:33:57.383Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://jvn.jp/en/vu/JVNVU97943829/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2023-51654",
"datePublished": "2023-12-26T05:33:57.383Z",
"dateReserved": "2023-12-20T23:27:53.139Z",
"dateUpdated": "2024-08-02T22:40:33.847Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-28369 (GCVE-0-2023-28369)
Vulnerability from nvd – Published: 2023-05-18 00:00 – Updated: 2025-01-22 16:31
VLAI
EPSS
VEX
Summary
Brother iPrint&Scan V6.11.2 and earlier contains an improper access control vulnerability. This vulnerability may be exploited by the other app installed on the victim user's Android device, which may lead to displaying the settings and/or log information of the affected app as a print preview.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- Improper access control
- CWE-noinfo Not enough information
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| BROTHER INDUSTRIES, LTD. | Brother iPrint&Scan |
Affected:
V6.11.2 and earlier
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T12:38:24.988Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://support.brother.com/g/b/link.aspx?prod=group2\u0026faqid=faq00100794_000"
},
{
"tags": [
"x_transferred"
],
"url": "https://faq.brother.co.jp/app/answers/detail/a_id/13468"
},
{
"tags": [
"x_transferred"
],
"url": "https://play.google.com/store/apps/details?id=com.brother.mfc.brprint"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/vu/JVNVU97891206/"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-28369",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-22T16:31:16.583241Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-22T16:31:20.241Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Brother iPrint\u0026Scan",
"vendor": "BROTHER INDUSTRIES, LTD.",
"versions": [
{
"status": "affected",
"version": "V6.11.2 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Brother iPrint\u0026Scan V6.11.2 and earlier contains an improper access control vulnerability. This vulnerability may be exploited by the other app installed on the victim user\u0027s Android device, which may lead to displaying the settings and/or log information of the affected app as a print preview."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Improper access control",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-05-18T00:00:00.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://support.brother.com/g/b/link.aspx?prod=group2\u0026faqid=faq00100794_000"
},
{
"url": "https://faq.brother.co.jp/app/answers/detail/a_id/13468"
},
{
"url": "https://play.google.com/store/apps/details?id=com.brother.mfc.brprint"
},
{
"url": "https://jvn.jp/en/vu/JVNVU97891206/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2023-28369",
"datePublished": "2023-05-18T00:00:00.000Z",
"dateReserved": "2023-03-15T00:00:00.000Z",
"dateUpdated": "2025-01-22T16:31:20.241Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2021-47985 (GCVE-0-2021-47985)
Vulnerability from cvelistv5 – Published: 2026-06-19 14:16 – Updated: 2026-06-22 19:34
VLAI
EPSS
VEX
Title
Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation
Summary
Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Attackers can place a malicious executable in the Program Files directory path to be executed with LocalSystem privileges when the service starts automatically.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-428 - Unquoted Search Path or Element
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.exploit-db.com/exploits/50061 | exploit |
| https://brother.com/ | product |
| https://www.vulncheck.com/advisories/brother-saps… | third-party-advisory |
Date Public
2021-06-21 00:00
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2021-47985",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-22T19:34:48.865563Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-22T19:34:55.391Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "SAPSprint",
"vendor": "Brother",
"versions": [
{
"status": "affected",
"version": "7.60"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Brian Rodriguez"
}
],
"datePublic": "2021-06-21T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Brother SAPSprint 7.60 contains an unquoted service path vulnerability in the SAPSprint service binary that allows local attackers to escalate privileges. Attackers can place a malicious executable in the Program Files directory path to be executed with LocalSystem privileges when the service starts automatically."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-428",
"description": "Unquoted Search Path or Element",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-19T14:16:52.808Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "ExploitDB-50061",
"tags": [
"exploit"
],
"url": "https://www.exploit-db.com/exploits/50061"
},
{
"name": "Official Product Homepage",
"tags": [
"product"
],
"url": "https://brother.com/"
},
{
"name": "VulnCheck Advisory: Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/brother-sapsprint-unquoted-service-path-privilege-escalation"
}
],
"title": "Brother SAPSprint 7.60 Unquoted Service Path Privilege Escalation",
"x_generator": {
"engine": "vulncheck"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2021-47985",
"datePublished": "2026-06-19T14:16:52.808Z",
"dateReserved": "2026-06-19T13:09:21.117Z",
"dateUpdated": "2026-06-22T19:34:55.391Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2020-36929 (GCVE-0-2020-36929)
Vulnerability from cvelistv5 – Published: 2026-01-15 23:25 – Updated: 2026-01-16 16:52
VLAI
EPSS
VEX
Title
Brother BRPrint Auditor 3.0.7 - 'Multiple' Unquoted Service Path
Summary
Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted file paths in BrAuSvc and BRPA_Agent services to inject malicious executables and escalate privileges on the system.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-428 - Unquoted Search Path or Element
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://www.exploit-db.com/exploits/50005 | exploit |
| https://support.brother.com/g/s/id/common_downloa… | product |
| https://support.brother.com/g/s/id/common_downloa… | product |
| https://www.vulncheck.com/advisories/brother-brpr… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Support | Brother BRPrint Auditor |
Affected:
3.0.7
|
Date Public
2021-06-14 00:00
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2020-36929",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-16T16:36:43.763677Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-16T16:52:48.820Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://www.exploit-db.com/exploits/50005"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Brother BRPrint Auditor",
"vendor": "Support",
"versions": [
{
"status": "affected",
"version": "3.0.7"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Brian Rodriguez"
}
],
"datePublic": "2021-06-14T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Brother BRPrint Auditor 3.0.7 contains an unquoted service path vulnerability in its Windows service configurations that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted file paths in BrAuSvc and BRPA_Agent services to inject malicious executables and escalate privileges on the system."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-428",
"description": "Unquoted Search Path or Element",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-15T23:25:34.881Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "ExploitDB-50005",
"tags": [
"exploit"
],
"url": "https://www.exploit-db.com/exploits/50005"
},
{
"name": "Brother BRPrint Auditor Download Page (NL)",
"tags": [
"product"
],
"url": "https://support.brother.com/g/s/id/common_download/en/auditor_pro3.html?c=be\u0026lang=nl\u0026redirect=on"
},
{
"name": "Brother BRPrint Auditor Download Page (FR)",
"tags": [
"product"
],
"url": "https://support.brother.com/g/s/id/common_download/en/auditor_pro3.html?c=be\u0026lang=fr\u0026redirect=on"
},
{
"name": "VulnCheck Advisory: Brother BRPrint Auditor 3.0.7 - \u0027Multiple\u0027 Unquoted Service Path",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/brother-brprint-auditor-multiple-unquoted-service-path"
}
],
"title": "Brother BRPrint Auditor 3.0.7 - \u0027Multiple\u0027 Unquoted Service Path",
"x_generator": {
"engine": "vulncheck"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2020-36929",
"datePublished": "2026-01-15T23:25:34.881Z",
"dateReserved": "2026-01-10T13:50:35.693Z",
"dateUpdated": "2026-01-16T16:52:48.820Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2020-36928 (GCVE-0-2020-36928)
Vulnerability from cvelistv5 – Published: 2026-01-15 23:25 – Updated: 2026-01-16 16:53
VLAI
EPSS
VEX
Title
Brother BRAgent 1.38 - 'WBA_Agent_Client' Unquoted Service Path
Summary
Brother BRAgent 1.38 contains an unquoted service path vulnerability in the WBA_Agent_Client service running with LocalSystem privileges. Attackers can exploit the unquoted path in C:\Program Files (x86)\Brother\BRAgent\ to inject and execute malicious code with elevated system permissions.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-428 - Unquoted Search Path or Element
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.exploit-db.com/exploits/50010 | exploit |
| https://help.brother-usa.com/app/answers/detail/a… | product |
| https://www.vulncheck.com/advisories/brother-brag… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Brother | Brother BRAgent |
Affected:
1.38
|
Date Public
2021-06-14 00:00
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2020-36928",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-16T16:53:09.408804Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-01-16T16:53:34.686Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://www.exploit-db.com/exploits/50010"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Brother BRAgent",
"vendor": "Brother",
"versions": [
{
"status": "affected",
"version": "1.38"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Brian Rodriguez"
}
],
"datePublic": "2021-06-14T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Brother BRAgent 1.38 contains an unquoted service path vulnerability in the WBA_Agent_Client service running with LocalSystem privileges. Attackers can exploit the unquoted path in C:\\Program Files (x86)\\Brother\\BRAgent\\ to inject and execute malicious code with elevated system permissions."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-428",
"description": "Unquoted Search Path or Element",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-15T23:25:34.323Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "ExploitDB-50010",
"tags": [
"exploit"
],
"url": "https://www.exploit-db.com/exploits/50010"
},
{
"name": "BRAgent Webpage",
"tags": [
"product"
],
"url": "https://help.brother-usa.com/app/answers/detail/a_id/174732/~/what-is-bragent%3F"
},
{
"name": "VulnCheck Advisory: Brother BRAgent 1.38 - \u0027WBA_Agent_Client\u0027 Unquoted Service Path",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/brother-bragent-wbaagentclient-unquoted-service-path"
}
],
"title": "Brother BRAgent 1.38 - \u0027WBA_Agent_Client\u0027 Unquoted Service Path",
"x_generator": {
"engine": "vulncheck"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2020-36928",
"datePublished": "2026-01-15T23:25:34.323Z",
"dateReserved": "2026-01-10T13:50:35.693Z",
"dateUpdated": "2026-01-16T16:53:34.686Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2023-51654 (GCVE-0-2023-51654)
Vulnerability from cvelistv5 – Published: 2023-12-26 05:33 – Updated: 2024-08-02 22:40
VLAI
EPSS
VEX
Summary
Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by a malicious user may cause a Denial-of-service (DoS) condition on the PC.
Severity
No CVSS data available.
CWE
- Improper Link Resolution Before File Access ('Link Following')
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://jvn.jp/en/vu/JVNVU97943829/ |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Brother Industries, Ltd. | iPrint&Scan Desktop for Windows |
Affected:
11.0.0 and earlier
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T22:40:33.847Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/vu/JVNVU97943829/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "iPrint\u0026Scan Desktop for Windows",
"vendor": "Brother Industries, Ltd.",
"versions": [
{
"status": "affected",
"version": "11.0.0 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper link resolution before file access (\u0027Link Following\u0027) issue exists in iPrint\u0026Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by a malicious user may cause a Denial-of-service (DoS) condition on the PC."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-12-26T05:33:57.383Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://jvn.jp/en/vu/JVNVU97943829/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2023-51654",
"datePublished": "2023-12-26T05:33:57.383Z",
"dateReserved": "2023-12-20T23:27:53.139Z",
"dateUpdated": "2024-08-02T22:40:33.847Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-28369 (GCVE-0-2023-28369)
Vulnerability from cvelistv5 – Published: 2023-05-18 00:00 – Updated: 2025-01-22 16:31
VLAI
EPSS
VEX
Summary
Brother iPrint&Scan V6.11.2 and earlier contains an improper access control vulnerability. This vulnerability may be exploited by the other app installed on the victim user's Android device, which may lead to displaying the settings and/or log information of the affected app as a print preview.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- Improper access control
- CWE-noinfo Not enough information
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| BROTHER INDUSTRIES, LTD. | Brother iPrint&Scan |
Affected:
V6.11.2 and earlier
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T12:38:24.988Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://support.brother.com/g/b/link.aspx?prod=group2\u0026faqid=faq00100794_000"
},
{
"tags": [
"x_transferred"
],
"url": "https://faq.brother.co.jp/app/answers/detail/a_id/13468"
},
{
"tags": [
"x_transferred"
],
"url": "https://play.google.com/store/apps/details?id=com.brother.mfc.brprint"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/vu/JVNVU97891206/"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.3,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-28369",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-22T16:31:16.583241Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-22T16:31:20.241Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Brother iPrint\u0026Scan",
"vendor": "BROTHER INDUSTRIES, LTD.",
"versions": [
{
"status": "affected",
"version": "V6.11.2 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Brother iPrint\u0026Scan V6.11.2 and earlier contains an improper access control vulnerability. This vulnerability may be exploited by the other app installed on the victim user\u0027s Android device, which may lead to displaying the settings and/or log information of the affected app as a print preview."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Improper access control",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-05-18T00:00:00.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://support.brother.com/g/b/link.aspx?prod=group2\u0026faqid=faq00100794_000"
},
{
"url": "https://faq.brother.co.jp/app/answers/detail/a_id/13468"
},
{
"url": "https://play.google.com/store/apps/details?id=com.brother.mfc.brprint"
},
{
"url": "https://jvn.jp/en/vu/JVNVU97891206/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2023-28369",
"datePublished": "2023-05-18T00:00:00.000Z",
"dateReserved": "2023-03-15T00:00:00.000Z",
"dateUpdated": "2025-01-22T16:31:20.241Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
VAR-202504-3731
Vulnerability from variot - Updated: 2025-05-13 23:19Brother MFC-L2713DW is a multifunction laser printer with printing, copying, scanning and faxing functions.
Brother MFC-L2713DW has a weak password vulnerability that can be exploited by attackers to obtain sensitive information.
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202504-3731",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-l2713dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-08188"
}
]
},
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2025-08188",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "CNVD",
"id": "CNVD-2025-08188",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-08188"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-L2713DW is a multifunction laser printer with printing, copying, scanning and faxing functions.\n\nBrother MFC-L2713DW has a weak password vulnerability that can be exploited by attackers to obtain sensitive information.",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-08188"
}
],
"trust": 0.6
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2025-08188",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-08188"
}
]
},
"id": "VAR-202504-3731",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-08188"
}
],
"trust": 0.06
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"IoT"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-08188"
}
]
},
"last_update_date": "2025-05-13T23:19:12.809000Z",
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2025-08188"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2025-04-24T00:00:00",
"db": "CNVD",
"id": "CNVD-2025-08188"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2025-04-24T00:00:00",
"db": "CNVD",
"id": "CNVD-2025-08188"
}
]
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-L2713DW has weak password vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-08188"
}
],
"trust": 0.6
}
}
VAR-202504-3806
Vulnerability from variot - Updated: 2025-05-13 23:16Brother MFC-J491DW is a multi-function color inkjet printer suitable for various office and personal use scenarios.
Brother MFC-J491DW has a weak password vulnerability that can be exploited by attackers to obtain sensitive information.
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202504-3806",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-j491dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-08187"
}
]
},
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2025-08187",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "CNVD",
"id": "CNVD-2025-08187",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-08187"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-J491DW is a multi-function color inkjet printer suitable for various office and personal use scenarios.\n\nBrother MFC-J491DW has a weak password vulnerability that can be exploited by attackers to obtain sensitive information.",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-08187"
}
],
"trust": 0.6
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2025-08187",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-08187"
}
]
},
"id": "VAR-202504-3806",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-08187"
}
],
"trust": 0.06
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"IoT"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-08187"
}
]
},
"last_update_date": "2025-05-13T23:16:35.729000Z",
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2025-08187"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2025-04-24T00:00:00",
"db": "CNVD",
"id": "CNVD-2025-08187"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2025-04-24T00:00:00",
"db": "CNVD",
"id": "CNVD-2025-08187"
}
]
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-J491DW has weak password vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-08187"
}
],
"trust": 0.6
}
}
VAR-201711-0781
Vulnerability from variot - Updated: 2025-04-20 23:42The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying (~300 seconds) with an HTTP 500 error. While the server is hung, print jobs over the network are blocked and the web interface is inaccessible. An attacker can continuously send this malformed request to keep the device inaccessible to legitimate traffic. Brother DCP-J132W Contains an access control vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. Debutembeddedhttpserver is an embedded HTTP server. A security vulnerability exists in the Debutembeddedhttpserver1.20 release
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201711-0781",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "dcp-j132w",
"scope": "lte",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "dcp-j132w",
"scope": null,
"trust": 0.8,
"vendor": "brother industry",
"version": null
},
{
"model": "debut embedded http server",
"scope": "eq",
"trust": 0.6,
"vendor": "brother",
"version": "1.2"
},
{
"model": "dcp-j132w",
"scope": "eq",
"trust": 0.6,
"vendor": "brother",
"version": "1.20"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-37618"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010205"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-171"
},
{
"db": "NVD",
"id": "CVE-2017-16249"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:dcp-j132w_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-010205"
}
]
},
"cve": "CVE-2017-16249",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2017-16249",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CNVD-2017-37618",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-107152",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2017-16249",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2017-16249",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2017-16249",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2017-37618",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201711-171",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-107152",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-37618"
},
{
"db": "VULHUB",
"id": "VHN-107152"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010205"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-171"
},
{
"db": "NVD",
"id": "CVE-2017-16249"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying (~300 seconds) with an HTTP 500 error. While the server is hung, print jobs over the network are blocked and the web interface is inaccessible. An attacker can continuously send this malformed request to keep the device inaccessible to legitimate traffic. Brother DCP-J132W Contains an access control vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. Debutembeddedhttpserver is an embedded HTTP server. A security vulnerability exists in the Debutembeddedhttpserver1.20 release",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-16249"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010205"
},
{
"db": "CNVD",
"id": "CNVD-2017-37618"
},
{
"db": "VULHUB",
"id": "VHN-107152"
}
],
"trust": 2.25
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-107152",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-107152"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-16249",
"trust": 3.1
},
{
"db": "PACKETSTORM",
"id": "144908",
"trust": 2.3
},
{
"db": "EXPLOIT-DB",
"id": "43119",
"trust": 2.3
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010205",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201711-171",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2017-37618",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-107152",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-37618"
},
{
"db": "VULHUB",
"id": "VHN-107152"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010205"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-171"
},
{
"db": "NVD",
"id": "CVE-2017-16249"
}
]
},
"id": "VAR-201711-0781",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-37618"
},
{
"db": "VULHUB",
"id": "VHN-107152"
}
],
"trust": 1.4857143
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-37618"
}
]
},
"last_update_date": "2025-04-20T23:42:04.281000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "DCP-J132W",
"trust": 0.8,
"url": "http://support.brother.com/g/b/manualtop.aspx?c=eu_ot\u0026lang=en\u0026prod=dcpj132w_eu"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-010205"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
},
{
"problemtype": "CWE-284",
"trust": 0.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-107152"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010205"
},
{
"db": "NVD",
"id": "CVE-2017-16249"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "https://www.trustwave.com/resources/security-advisories/advisories/twsl2017-017/?fid=10211"
},
{
"trust": 2.3,
"url": "https://www.exploit-db.com/exploits/43119/"
},
{
"trust": 1.7,
"url": "http://packetstormsecurity.com/files/144908/debut-embedded-httpd-1.20-denial-of-service.html"
},
{
"trust": 1.6,
"url": "https://www.trustwave.com/resources/spiderlabs-blog/denial-of-service-vulnerability-in-brother-printers/?page=1\u0026year=0\u0026month=0\u0026langtype=1033"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-16249"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-16249"
},
{
"trust": 0.6,
"url": "httpd-1.20-denial-of-service.html"
},
{
"trust": 0.6,
"url": "https://packetstormsecurity.com/files/144908/debut-embedded-"
},
{
"trust": 0.1,
"url": "https://www.trustwave.com/resources/spiderlabs-blog/denial-of-service-vulnerability-in-brother-printers/?page=1\u0026amp;year=0\u0026amp;month=0\u0026amp;langtype=1033"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-37618"
},
{
"db": "VULHUB",
"id": "VHN-107152"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010205"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-171"
},
{
"db": "NVD",
"id": "CVE-2017-16249"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2017-37618"
},
{
"db": "VULHUB",
"id": "VHN-107152"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-010205"
},
{
"db": "CNNVD",
"id": "CNNVD-201711-171"
},
{
"db": "NVD",
"id": "CVE-2017-16249"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-12-20T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-37618"
},
{
"date": "2017-11-10T00:00:00",
"db": "VULHUB",
"id": "VHN-107152"
},
{
"date": "2017-12-07T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-010205"
},
{
"date": "2017-10-31T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201711-171"
},
{
"date": "2017-11-10T02:29:18.607000",
"db": "NVD",
"id": "CVE-2017-16249"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-12-20T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-37618"
},
{
"date": "2019-10-03T00:00:00",
"db": "VULHUB",
"id": "VHN-107152"
},
{
"date": "2017-12-07T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-010205"
},
{
"date": "2019-10-23T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201711-171"
},
{
"date": "2025-04-20T01:37:25.860000",
"db": "NVD",
"id": "CVE-2017-16249"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201711-171"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother DCP-J132W Access control vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-010205"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "lack of information",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201711-171"
}
],
"trust": 0.6
}
}
VAR-201704-1432
Vulnerability from variot - Updated: 2025-04-20 23:40On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt. Affected models are: MFC-J6973CDW MFC-J4420DW MFC-8710DW MFC-J4620DW MFC-L8850CDW MFC-J3720 MFC-J6520DW MFC-L2740DW MFC-J5910DW MFC-J6920DW MFC-L2700DW MFC-9130CW MFC-9330CDW MFC-9340CDW MFC-J5620DW MFC-J6720DW MFC-L8600CDW MFC-L9550CDW MFC-L2720DW DCP-L2540DW DCP-L2520DW HL-3140CW HL-3170CDW HL-3180CDW HL-L8350CDW HL-L2380DW ADS-2500W ADS-1000W ADS-1500W. plural Brother An authentication vulnerability exists in device products.Information is acquired, information is falsified, and denial of service (DoS) An attack could be made. BrotherMFC-J6973CDW and others are printer products of Brother Industries of Japan. There are security holes in many Brother devices. An attacker could exploit the vulnerability to bypass web authentication. Brother MFC-J6973CDW, etc
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201704-1432",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc",
"scope": "eq",
"trust": 1.6,
"vendor": "brother",
"version": null
},
{
"model": "dcp",
"scope": "eq",
"trust": 1.6,
"vendor": "brother",
"version": null
},
{
"model": "ads",
"scope": "eq",
"trust": 1.6,
"vendor": "brother",
"version": null
},
{
"model": "hl",
"scope": "eq",
"trust": 1.6,
"vendor": "brother",
"version": null
},
{
"model": "ads",
"scope": null,
"trust": 0.8,
"vendor": "brother industry",
"version": null
},
{
"model": "dcp",
"scope": null,
"trust": 0.8,
"vendor": "brother industry",
"version": null
},
{
"model": "hl",
"scope": null,
"trust": 0.8,
"vendor": "brother industry",
"version": null
},
{
"model": "mfc",
"scope": null,
"trust": 0.8,
"vendor": "brother industry",
"version": null
},
{
"model": "mfc-j6973cdw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "ads-1500w",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "ads-1000w",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "ads-2500w",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2380dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8350cdw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "hl-3180cdw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "hl-3170cdw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "hl-3140cw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2520dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9550cdw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8600cdw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6720dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5620dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9340cdw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9330cdw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9130cw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6920dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5910dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6520dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j3720",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8850cdw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j4620dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8710dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j4420dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-05030"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-003085"
},
{
"db": "CNNVD",
"id": "CNNVD-201704-323"
},
{
"db": "NVD",
"id": "CVE-2017-7588"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:ads_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:brother:dcp_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:brother:hl_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:brother:mfc_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-003085"
}
]
},
"cve": "CVE-2017-7588",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2017-7588",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.9,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2017-05030",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "VHN-115791",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2017-7588",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2017-7588",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2017-7588",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNVD",
"id": "CNVD-2017-05030",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201704-323",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-115791",
"trust": 0.1,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2017-7588",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-05030"
},
{
"db": "VULHUB",
"id": "VHN-115791"
},
{
"db": "VULMON",
"id": "CVE-2017-7588"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-003085"
},
{
"db": "CNNVD",
"id": "CNNVD-201704-323"
},
{
"db": "NVD",
"id": "CVE-2017-7588"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt. Affected models are: MFC-J6973CDW MFC-J4420DW MFC-8710DW MFC-J4620DW MFC-L8850CDW MFC-J3720 MFC-J6520DW MFC-L2740DW MFC-J5910DW MFC-J6920DW MFC-L2700DW MFC-9130CW MFC-9330CDW MFC-9340CDW MFC-J5620DW MFC-J6720DW MFC-L8600CDW MFC-L9550CDW MFC-L2720DW DCP-L2540DW DCP-L2520DW HL-3140CW HL-3170CDW HL-3180CDW HL-L8350CDW HL-L2380DW ADS-2500W ADS-1000W ADS-1500W. plural Brother An authentication vulnerability exists in device products.Information is acquired, information is falsified, and denial of service (DoS) An attack could be made. BrotherMFC-J6973CDW and others are printer products of Brother Industries of Japan. There are security holes in many Brother devices. An attacker could exploit the vulnerability to bypass web authentication. Brother MFC-J6973CDW, etc",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-7588"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-003085"
},
{
"db": "CNVD",
"id": "CNVD-2017-05030"
},
{
"db": "VULHUB",
"id": "VHN-115791"
},
{
"db": "VULMON",
"id": "CVE-2017-7588"
}
],
"trust": 2.34
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-115791",
"trust": 0.1,
"type": "unknown"
},
{
"reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=41863",
"trust": 0.1,
"type": "exploit"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-115791"
},
{
"db": "VULMON",
"id": "CVE-2017-7588"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-7588",
"trust": 3.2
},
{
"db": "CXSECURITY",
"id": "WLB-2017040064",
"trust": 3.2
},
{
"db": "EXPLOIT-DB",
"id": "41863",
"trust": 1.2
},
{
"db": "JVNDB",
"id": "JVNDB-2017-003085",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201704-323",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2017-05030",
"trust": 0.6
},
{
"db": "PACKETSTORM",
"id": "142105",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-115791",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2017-7588",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-05030"
},
{
"db": "VULHUB",
"id": "VHN-115791"
},
{
"db": "VULMON",
"id": "CVE-2017-7588"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-003085"
},
{
"db": "CNNVD",
"id": "CNNVD-201704-323"
},
{
"db": "NVD",
"id": "CVE-2017-7588"
}
]
},
"id": "VAR-201704-1432",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-05030"
},
{
"db": "VULHUB",
"id": "VHN-115791"
}
],
"trust": 1.7
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-05030"
}
]
},
"last_update_date": "2025-04-20T23:40:09.521000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.brother.co.jp/"
},
{
"title": "A variety of Brother device certification bypasses the patch for the vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/92380"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-05030"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-003085"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-287",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-115791"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-003085"
},
{
"db": "NVD",
"id": "CVE-2017-7588"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.2,
"url": "https://cxsecurity.com/blad/wlb-2017040064"
},
{
"trust": 1.3,
"url": "https://www.exploit-db.com/exploits/41863/"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-7588"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-7588"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/287.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-05030"
},
{
"db": "VULHUB",
"id": "VHN-115791"
},
{
"db": "VULMON",
"id": "CVE-2017-7588"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-003085"
},
{
"db": "CNNVD",
"id": "CNNVD-201704-323"
},
{
"db": "NVD",
"id": "CVE-2017-7588"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2017-05030"
},
{
"db": "VULHUB",
"id": "VHN-115791"
},
{
"db": "VULMON",
"id": "CVE-2017-7588"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-003085"
},
{
"db": "CNNVD",
"id": "CNNVD-201704-323"
},
{
"db": "NVD",
"id": "CVE-2017-7588"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-04-22T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-05030"
},
{
"date": "2017-04-12T00:00:00",
"db": "VULHUB",
"id": "VHN-115791"
},
{
"date": "2017-04-12T00:00:00",
"db": "VULMON",
"id": "CVE-2017-7588"
},
{
"date": "2017-05-15T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-003085"
},
{
"date": "2017-04-10T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201704-323"
},
{
"date": "2017-04-12T10:59:00.337000",
"db": "NVD",
"id": "CVE-2017-7588"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-04-22T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-05030"
},
{
"date": "2017-08-16T00:00:00",
"db": "VULHUB",
"id": "VHN-115791"
},
{
"date": "2017-08-16T00:00:00",
"db": "VULMON",
"id": "CVE-2017-7588"
},
{
"date": "2017-05-15T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-003085"
},
{
"date": "2017-04-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201704-323"
},
{
"date": "2025-04-20T01:37:25.860000",
"db": "NVD",
"id": "CVE-2017-7588"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201704-323"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Brother Authentication vulnerabilities in device products",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-003085"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "authorization issue",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201704-323"
}
],
"trust": 0.6
}
}
VAR-201707-0335
Vulnerability from variot - Updated: 2025-04-20 23:32Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. MFC-J960DWN provided by BROTHER INDUSTRIES, LTD. is a MultiFunction Printer. MFC-J960DWN contains a cross-site request forgery vulnerability (CWE-352). Taiga Asano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.If a user views a malicious page, unintended operations such as changing settings of the device may be performed. A remote attacker could exploit this vulnerability to perform unauthorized operations
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201707-0335",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-j960dwn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": "d"
},
{
"model": "mfc-j960dwn",
"scope": "lte",
"trust": 0.8,
"vendor": "brother industries",
"version": "ver.d"
},
{
"model": "industries ltd mfc-j960dwn \u003c=ver.d",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j960dwn",
"scope": "eq",
"trust": 0.6,
"vendor": "brother industries",
"version": "d"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
},
{
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:mfc-j960dwn_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
}
]
},
"cve": "CVE-2017-2244",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CVE-2017-2244",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "IPA",
"availabilityImpact": "None",
"baseScore": 4.3,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "JVNDB-2017-000160",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CNVD-2017-21543",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "VHN-110447",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2017-2244",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "IPA",
"availabilityImpact": "None",
"baseScore": 4.3,
"baseSeverity": "Medium",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "JVNDB-2017-000160",
"impactScore": null,
"integrityImpact": "Low",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "Required",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2017-2244",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "IPA",
"id": "JVNDB-2017-000160",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2017-21543",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201707-343",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-110447",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "VULHUB",
"id": "VHN-110447"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
},
{
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. MFC-J960DWN provided by BROTHER INDUSTRIES, LTD. is a MultiFunction Printer. MFC-J960DWN contains a cross-site request forgery vulnerability (CWE-352). Taiga Asano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.If a user views a malicious page, unintended operations such as changing settings of the device may be performed. A remote attacker could exploit this vulnerability to perform unauthorized operations",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-2244"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "VULHUB",
"id": "VHN-110447"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "JVN",
"id": "JVN95996423",
"trust": 3.1
},
{
"db": "NVD",
"id": "CVE-2017-2244",
"trust": 3.1
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2017-21543",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-110447",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "VULHUB",
"id": "VHN-110447"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
},
{
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"id": "VAR-201707-0335",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "VULHUB",
"id": "VHN-110447"
}
],
"trust": 1.7
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
}
]
},
"last_update_date": "2025-04-20T23:32:52.912000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "BROTHER INDUSTRIES, LTD. website",
"trust": 0.8,
"url": "http://support.brother.co.jp/j/s/support/vul_info/JVN95996423/index.html"
},
{
"title": "BrotherIndustriesMFC-J960DWN cross-site request forgery vulnerability patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/100303"
},
{
"title": "Brother Industries MFC-J960DWN Fixes for cross-site request forgery vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=71571"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-352",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-110447"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.1,
"url": "http://jvn.jp/en/jp/jvn95996423/index.html"
},
{
"trust": 1.7,
"url": "http://support.brother.co.jp/j/s/support/vul_info/jvn95996423/index.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-2244"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-2244"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "VULHUB",
"id": "VHN-110447"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
},
{
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "VULHUB",
"id": "VHN-110447"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
},
{
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-08-17T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"date": "2017-07-07T00:00:00",
"db": "VULHUB",
"id": "VHN-110447"
},
{
"date": "2017-07-04T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"date": "2017-07-10T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201707-343"
},
{
"date": "2017-07-07T13:29:01.427000",
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-08-17T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"date": "2017-07-14T00:00:00",
"db": "VULHUB",
"id": "VHN-110447"
},
{
"date": "2018-02-07T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-000160"
},
{
"date": "2021-09-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201707-343"
},
{
"date": "2025-04-20T01:37:25.860000",
"db": "NVD",
"id": "CVE-2017-2244"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother Industries MFC-J960DWN Cross-Site Request Forgery Vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-21543"
},
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
}
],
"trust": 1.2
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "cross-site request forgery",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201707-343"
}
],
"trust": 0.6
}
}
VAR-201708-0915
Vulnerability from variot - Updated: 2025-04-20 23:19Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows remote attackers to hang the printer (disrupting its network connection) by sending a large amount of HTTP packets. Brother DCP-J132W Contains a resource management vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. The BrotherDCP-J132W is a printer from Brother. Debut embedded httpd is one of the embedded servers
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201708-0915",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "dcp-j132w",
"scope": "eq",
"trust": 1.6,
"vendor": "brother",
"version": "1.20"
},
{
"model": "dcp-j132w",
"scope": null,
"trust": 0.8,
"vendor": "brother industry",
"version": null
},
{
"model": "dcp-j132w",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-27958"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006979"
},
{
"db": "CNNVD",
"id": "CNNVD-201708-190"
},
{
"db": "NVD",
"id": "CVE-2017-12568"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:dcp-j132w_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-006979"
}
]
},
"cve": "CVE-2017-12568",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2017-12568",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2017-27958",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-103103",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2017-12568",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2017-12568",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2017-12568",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2017-27958",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201708-190",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-103103",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-27958"
},
{
"db": "VULHUB",
"id": "VHN-103103"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006979"
},
{
"db": "CNNVD",
"id": "CNNVD-201708-190"
},
{
"db": "NVD",
"id": "CVE-2017-12568"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows remote attackers to hang the printer (disrupting its network connection) by sending a large amount of HTTP packets. Brother DCP-J132W Contains a resource management vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. The BrotherDCP-J132W is a printer from Brother. Debut embedded httpd is one of the embedded servers",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-12568"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006979"
},
{
"db": "CNVD",
"id": "CNVD-2017-27958"
},
{
"db": "VULHUB",
"id": "VHN-103103"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-12568",
"trust": 3.1
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006979",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201708-190",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2017-27958",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-103103",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-27958"
},
{
"db": "VULHUB",
"id": "VHN-103103"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006979"
},
{
"db": "CNNVD",
"id": "CNNVD-201708-190"
},
{
"db": "NVD",
"id": "CVE-2017-12568"
}
]
},
"id": "VAR-201708-0915",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-27958"
},
{
"db": "VULHUB",
"id": "VHN-103103"
}
],
"trust": 1.2714286
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-27958"
}
]
},
"last_update_date": "2025-04-20T23:19:52.809000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "DCP-J132W",
"trust": 0.8,
"url": "http://support.brother.com/g/b/manualtop.aspx?c=eu_ot\u0026lang=en\u0026prod=dcpj132w_eu"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-006979"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
},
{
"problemtype": "CWE-399",
"trust": 0.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-103103"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006979"
},
{
"db": "NVD",
"id": "CVE-2017-12568"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.1,
"url": "https://gist.github.com/tipilu/53f142466507b2ef4c8ceb08d22d1278"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-12568"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-12568"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-27958"
},
{
"db": "VULHUB",
"id": "VHN-103103"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006979"
},
{
"db": "CNNVD",
"id": "CNNVD-201708-190"
},
{
"db": "NVD",
"id": "CVE-2017-12568"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2017-27958"
},
{
"db": "VULHUB",
"id": "VHN-103103"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-006979"
},
{
"db": "CNNVD",
"id": "CNNVD-201708-190"
},
{
"db": "NVD",
"id": "CVE-2017-12568"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-09-22T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-27958"
},
{
"date": "2017-08-06T00:00:00",
"db": "VULHUB",
"id": "VHN-103103"
},
{
"date": "2017-09-07T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-006979"
},
{
"date": "2017-08-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201708-190"
},
{
"date": "2017-08-06T01:29:00.997000",
"db": "NVD",
"id": "CVE-2017-12568"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-09-22T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-27958"
},
{
"date": "2019-10-03T00:00:00",
"db": "VULHUB",
"id": "VHN-103103"
},
{
"date": "2017-09-07T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-006979"
},
{
"date": "2019-10-23T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201708-190"
},
{
"date": "2025-04-20T01:37:25.860000",
"db": "NVD",
"id": "CVE-2017-12568"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201708-190"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother DCP-J132W Resource management vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-006979"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "resource management error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201708-190"
}
],
"trust": 0.6
}
}
VAR-201501-0136
Vulnerability from variot - Updated: 2025-04-13 23:35Cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages. The Brother MFC-J4410DW is a color laser printer device that supports wireless network printing. An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of a browser that is not known to the affected user. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Brother MFC-J4410DW is a printer product of Japan Brother Industries (Brother). The vulnerability is caused by the general/status.html file not adequately filtering the 'url' parameter
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201501-0136",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-j4410dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": "*"
},
{
"model": "mfc-j4410dw",
"scope": "lte",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "mfc-j4410dw",
"scope": null,
"trust": 0.8,
"vendor": "brother industry",
"version": null
},
{
"model": "mfc-j4410dw",
"scope": "lt",
"trust": 0.8,
"vendor": "brother industry",
"version": "l"
},
{
"model": "industries ltd mfc-j4410dw",
"scope": null,
"trust": 0.6,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j4410dw",
"scope": "eq",
"trust": 0.6,
"vendor": "brother",
"version": "k"
},
{
"model": "mfc-j4410dw",
"scope": "eq",
"trust": 0.3,
"vendor": "brother",
"version": "0"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-00187"
},
{
"db": "BID",
"id": "71911"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001056"
},
{
"db": "CNNVD",
"id": "CNNVD-201501-180"
},
{
"db": "NVD",
"id": "CVE-2015-1056"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:brother:mfc-j4410dw",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:brother:mfc-j4410dw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-001056"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Dave Daly of Dionach",
"sources": [
{
"db": "BID",
"id": "71911"
},
{
"db": "CNNVD",
"id": "CNNVD-201501-180"
}
],
"trust": 0.9
},
"cve": "CVE-2015-1056",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "CVE-2015-1056",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "CNVD-2015-00187",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "VHN-79016",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:N/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2015-1056",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2015-1056",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2015-00187",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201501-180",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-79016",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-00187"
},
{
"db": "VULHUB",
"id": "VHN-79016"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001056"
},
{
"db": "CNNVD",
"id": "CNNVD-201501-180"
},
{
"db": "NVD",
"id": "CVE-2015-1056"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages. The Brother MFC-J4410DW is a color laser printer device that supports wireless network printing. An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of a browser that is not known to the affected user. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Brother MFC-J4410DW is a printer product of Japan Brother Industries (Brother). The vulnerability is caused by the general/status.html file not adequately filtering the \u0027url\u0027 parameter",
"sources": [
{
"db": "NVD",
"id": "CVE-2015-1056"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001056"
},
{
"db": "CNVD",
"id": "CNVD-2015-00187"
},
{
"db": "BID",
"id": "71911"
},
{
"db": "VULHUB",
"id": "VHN-79016"
}
],
"trust": 2.52
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2015-1056",
"trust": 2.8
},
{
"db": "BID",
"id": "71911",
"trust": 2.6
},
{
"db": "PACKETSTORM",
"id": "129841",
"trust": 2.5
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001056",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201501-180",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2015-00187",
"trust": 0.6
},
{
"db": "XF",
"id": "99906",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-79016",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-00187"
},
{
"db": "VULHUB",
"id": "VHN-79016"
},
{
"db": "BID",
"id": "71911"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001056"
},
{
"db": "CNNVD",
"id": "CNNVD-201501-180"
},
{
"db": "NVD",
"id": "CVE-2015-1056"
}
]
},
"id": "VAR-201501-0136",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-00187"
},
{
"db": "VULHUB",
"id": "VHN-79016"
}
],
"trust": 1.7
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-00187"
}
]
},
"last_update_date": "2025-04-13T23:35:12.946000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.brother.com"
},
{
"title": "There are multiple cross-site scripting vulnerability patches for the Brother MFC-J4410DW printer \u0027url\u0027 parameter",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/53781"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-00187"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001056"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-79",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-79016"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001056"
},
{
"db": "NVD",
"id": "CVE-2015-1056"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://packetstormsecurity.com/files/129841/brother-mfc-j4410dw-cross-site-scripting.html"
},
{
"trust": 2.3,
"url": "http://www.securityfocus.com/bid/71911"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/534398/100/0/threaded"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/99906"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-1056"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-1056"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/534398/100/0/threaded"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/99906"
},
{
"trust": 0.3,
"url": "http://www.brother.com"
},
{
"trust": 0.3,
"url": "http://seclists.org/bugtraq/2015/jan/19 "
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-00187"
},
{
"db": "VULHUB",
"id": "VHN-79016"
},
{
"db": "BID",
"id": "71911"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001056"
},
{
"db": "CNNVD",
"id": "CNNVD-201501-180"
},
{
"db": "NVD",
"id": "CVE-2015-1056"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2015-00187"
},
{
"db": "VULHUB",
"id": "VHN-79016"
},
{
"db": "BID",
"id": "71911"
},
{
"db": "JVNDB",
"id": "JVNDB-2015-001056"
},
{
"db": "CNNVD",
"id": "CNNVD-201501-180"
},
{
"db": "NVD",
"id": "CVE-2015-1056"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-01-09T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-00187"
},
{
"date": "2015-01-16T00:00:00",
"db": "VULHUB",
"id": "VHN-79016"
},
{
"date": "2015-01-07T00:00:00",
"db": "BID",
"id": "71911"
},
{
"date": "2015-01-21T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-001056"
},
{
"date": "2015-01-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201501-180"
},
{
"date": "2015-01-16T15:59:06.077000",
"db": "NVD",
"id": "CVE-2015-1056"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2015-01-09T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-00187"
},
{
"date": "2018-10-09T00:00:00",
"db": "VULHUB",
"id": "VHN-79016"
},
{
"date": "2015-04-13T21:01:00",
"db": "BID",
"id": "71911"
},
{
"date": "2015-01-21T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2015-001056"
},
{
"date": "2015-01-19T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201501-180"
},
{
"date": "2025-04-12T10:46:40.837000",
"db": "NVD",
"id": "CVE-2015-1056"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201501-180"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-J4410DW Cross-site scripting vulnerability in printer firmware",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2015-001056"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "XSS",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201501-180"
}
],
"trust": 0.6
}
}
VAR-201403-0045
Vulnerability from variot - Updated: 2025-04-13 23:14Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1.10) allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter name (QUERY_STRING) to admin/admin_main.html, a different vulnerability than CVE-2013-2507 and CVE-2013-2671. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. The /admin/admin_main.html script included with the Brother MFC-9970CDW incorrectly filters data submitted by users to the 'signedpdf' and 'websettings' parameters, allowing remote attackers to exploit vulnerabilities for cross-site scripting attacks, to obtain sensitive information or to hijack user sessions. A remote attacker can exploit a vulnerability to gain sensitive information or hijack a user's session. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Brother MFC-9970CDW version 1.10 firmware G and firmware L are vulnerable; other versions may also be affected. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
=========================================
Brother MFC-9970CDW Firmware 0D
Date: Jan. 13, 2013
URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html
=========================================
Keywords
=========================================
XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit, Zero Day, Brother MFC-9970 CDW
CVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673, CVE-2013-2674, CVE-2013-2675, CVE-2013-2676
=========================================
Summary
=========================================
A Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in January 2013. This document will introduce and discuss the vulnerability and provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware L Version 1.10 Released on July 9, 2012, and prior versions.
=========================================
Overview
=========================================
Brother Industries, Ltd. is a multinational electronics and electrical equipment company headquartered in Nagoya, Japan. Its products include printers, multifunction printers, sewing machines, large machine tools, label printers, typewriters, fax machines, and other computer-related electronics. Brother distributes its products both under its own name and under OEM agreements with other companies. It produces high-impact color output at impressive print and copy speeds of up to 30ppm and offers flexible connectivity with wireless, Ethernet and USB interfaces. It features a 5" Color Touch Screen display for easy navigation and menu selection. Also, this flagship model offers automatic duplex print/copy/scan/fax and optional high yield toner cartridges to help lower your operating costs \x96 making this all-in-one a smart choice for a business or workgroup.
=========================================
The Bug
=========================================
Reflected Cross Site Scripting, CWE-79
=========================================
Vulnerable Parameters = id , val, kind + Query String
Signature = ">alert(1)
=========================================
Version Identification
=========================================
Brother MFC-9970CDW - Version Identification - Firmware \x93L\x94 Version 1.10
Brother MFC-9970CDW - Version Identification - Firmware \x93G\x94
=========================================
PoC
=========================================
PoC URL
http://my.vulnerable.printer/admin/admin_main.html?id=websettings"> alert(1)
=========================================
CVE Information
=========================================
CVE-2013-2507 is specific to Firmware G.
XSS at:
admin/admin_main.html name of an arbitrarily assigned URL parameter
CVE-2013-2671 is for the XSS issues that are only present in Firmware L.
CVEs for Firmware L:
Cleartext submission of password CVE-2013-2672
Password field with autocomplete enabled CVE-2013-2673
Cross-domain Referer leakage CVE-2013-2674
Frameable response (Clickjacking) CVE-2013-2675
Private IP addresses disclosed CVE-2013-2676
CVSS 2 Score = 4.5
Timeline
Attempt contact via e-mail in January 2013.
Call the Toll Free Support Line in March 2013.
Callback from Vendor in April 2013.
E-mail sent to Vendor in April 2013.
VENDOR UNRESPONSIVE
Published May 3, 2013
Hoyt LLC Research Public Domain Report
http://xss.cx/
=========================================
END
=========================================
-----BEGIN PGP SIGNATURE----- Version: 10.2.0.2526
wsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx 1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv AIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb 4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8 nSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG VQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg== =Ua1o -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201403-0045",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.6,
"vendor": "brother",
"version": "g\\(1.03\\)"
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.6,
"vendor": "brother",
"version": "l\\(1.10\\)"
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9970cdw l",
"scope": "eq",
"trust": 0.9,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw",
"scope": null,
"trust": 0.8,
"vendor": "brother industry",
"version": null
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industry",
"version": "g (1.03)"
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industry",
"version": "l (1.10)"
},
{
"model": "mfc-9970cdw g",
"scope": "eq",
"trust": 0.3,
"vendor": "brother",
"version": "1.10"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05291"
},
{
"db": "BID",
"id": "59720"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006193"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-203"
},
{
"db": "NVD",
"id": "CVE-2013-2670"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:brother:mfc-9970cdw",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:brother:mfc-9970cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-006193"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hoyt LLC",
"sources": [
{
"db": "BID",
"id": "59720"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-203"
}
],
"trust": 0.9
},
"cve": "CVE-2013-2670",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "CVE-2013-2670",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CNVD-2013-05291",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "VHN-62672",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:N/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-2670",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2013-2670",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2013-05291",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201305-203",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-62672",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05291"
},
{
"db": "VULHUB",
"id": "VHN-62672"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006193"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-203"
},
{
"db": "NVD",
"id": "CVE-2013-2670"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1.10) allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter name (QUERY_STRING) to admin/admin_main.html, a different vulnerability than CVE-2013-2507 and CVE-2013-2671. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. The /admin/admin_main.html script included with the Brother MFC-9970CDW incorrectly filters data submitted by users to the \u0027signedpdf\u0027 and \u0027websettings\u0027 parameters, allowing remote attackers to exploit vulnerabilities for cross-site scripting attacks, to obtain sensitive information or to hijack user sessions. A remote attacker can exploit a vulnerability to gain sensitive information or hijack a user\u0027s session. \nAn attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. \nBrother MFC-9970CDW version 1.10 firmware G and firmware L are vulnerable; other versions may also be affected. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=========================================\n\nBrother MFC-9970CDW Firmware 0D\n\nDate: Jan. 13, 2013\n\nURL:\nhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html\n\n=========================================\n\nKeywords\n\n=========================================\n\nXSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit,\nZero Day, Brother MFC-9970 CDW\n\nCVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673,\nCVE-2013-2674, CVE-2013-2675, CVE-2013-2676\n\n=========================================\n\nSummary\n\n=========================================\n\nA Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in\nJanuary 2013. This document will introduce and discuss the vulnerability\nand provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware\nL Version 1.10 Released on July 9, 2012, and prior versions. \n\n=========================================\n\nOverview\n\n=========================================\n\nBrother Industries, Ltd. is a multinational electronics and electrical\nequipment company headquartered in Nagoya, Japan. Its products include\nprinters, multifunction printers, sewing machines, large machine tools,\nlabel printers, typewriters, fax machines, and other computer-related\nelectronics. Brother distributes its products both under its own name and\nunder OEM agreements with other companies. It produces high-impact color output at impressive\nprint and copy speeds of up to 30ppm and offers flexible connectivity with\nwireless, Ethernet and USB interfaces. It features a 5\" Color Touch Screen\ndisplay for easy navigation and menu selection. Also, this flagship model\noffers automatic duplex print/copy/scan/fax and optional high yield toner\ncartridges to help lower your operating costs \\x96 making this all-in-one a\nsmart choice for a business or workgroup. \n\n=========================================\n\nThe Bug\n\n=========================================\n\nReflected Cross Site Scripting, CWE-79\n\n=========================================\n\nVulnerable Parameters = id , val, kind + Query String\n\nSignature = \"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\n\n=========================================\n\nVersion Identification\n\n=========================================\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93L\\x94 Version\n1.10\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93G\\x94\n\n=========================================\n\nPoC\n\n=========================================\n\nPoC URL\n\nhttp://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e\nalert(1)\u003c/script\u003e\n\n=========================================\n\nCVE Information\n\n=========================================\n\nCVE-2013-2507 is specific to Firmware G. \n\nXSS at:\n\n admin/admin_main.html name of an arbitrarily assigned URL parameter\n\nCVE-2013-2671 is for the XSS issues that are only present in Firmware L. \n\nCVEs for Firmware L:\n\nCleartext submission of password CVE-2013-2672\n\nPassword field with autocomplete enabled CVE-2013-2673\n\nCross-domain Referer leakage CVE-2013-2674\n\nFrameable response (Clickjacking) CVE-2013-2675\n\nPrivate IP addresses disclosed CVE-2013-2676\n\nCVSS 2 Score = 4.5\n\nTimeline\n\nAttempt contact via e-mail in January 2013. \n\nCall the Toll Free Support Line in March 2013. \n\nCallback from Vendor in April 2013. \n\nE-mail sent to Vendor in April 2013. \n\nVENDOR UNRESPONSIVE\n\nPublished May 3, 2013\n\nHoyt LLC Research Public Domain\nReport\n\nhttp://xss.cx/\n\n=========================================\n\nEND\n\n=========================================\n\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: 10.2.0.2526\n\nwsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx\n1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv\nAIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb\n4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8\nnSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG\nVQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg==\n=Ua1o\n-----END PGP SIGNATURE-----\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-2670"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006193"
},
{
"db": "CNVD",
"id": "CNVD-2013-05291"
},
{
"db": "BID",
"id": "59720"
},
{
"db": "VULHUB",
"id": "VHN-62672"
},
{
"db": "PACKETSTORM",
"id": "121553"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-2670",
"trust": 3.5
},
{
"db": "PACKETSTORM",
"id": "121553",
"trust": 2.6
},
{
"db": "OSVDB",
"id": "93068",
"trust": 2.5
},
{
"db": "BID",
"id": "59720",
"trust": 1.6
},
{
"db": "XF",
"id": "84095",
"trust": 1.4
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006193",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201305-203",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2013-05291",
"trust": 0.6
},
{
"db": "XF",
"id": "9970",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-62672",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05291"
},
{
"db": "VULHUB",
"id": "VHN-62672"
},
{
"db": "BID",
"id": "59720"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006193"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-203"
},
{
"db": "NVD",
"id": "CVE-2013-2670"
}
]
},
"id": "VAR-201403-0045",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05291"
},
{
"db": "VULHUB",
"id": "VHN-62672"
}
],
"trust": 1.3129032399999998
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05291"
}
]
},
"last_update_date": "2025-04-13T23:14:54.907000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.brother.com"
},
{
"title": "MFC-9970CDW",
"trust": 0.8,
"url": "http://brother.jp/product/printer/mfc/mfc9970cdw/index.htm"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-006193"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-79",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-62672"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006193"
},
{
"db": "NVD",
"id": "CVE-2013-2670"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.7,
"url": "http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html"
},
{
"trust": 2.5,
"url": "http://packetstormsecurity.com/files/121553/brother-mfc-9970cdw-firmware-0d-cross-site-scripting.html"
},
{
"trust": 2.5,
"url": "http://osvdb.org/93068"
},
{
"trust": 1.7,
"url": "http://osvdb.org/ref/93/brother-mfc-9970cdw-firmware-g-v103-by-hoyt-03072013.html"
},
{
"trust": 1.7,
"url": "http://osvdb.org/ref/93/brother-mfc9970cdw-firmware-l-110-hoytllc-report.html"
},
{
"trust": 1.4,
"url": "http://xforce.iss.net/xforce/xfdb/84095"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84095"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2670"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-2670"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/bid/59720"
},
{
"trust": 0.3,
"url": "http://www.brother.com"
},
{
"trust": 0.3,
"url": "http://www.brother-usa.com/mfc/modeldetail/4/mfc9970cdw/overview#.uyobsuqdyit"
},
{
"trust": 0.1,
"url": "http://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e"
},
{
"trust": 0.1,
"url": "http://xss.cx/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2507"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2671"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2674"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2670"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2676"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2672"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2675"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2673"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05291"
},
{
"db": "VULHUB",
"id": "VHN-62672"
},
{
"db": "BID",
"id": "59720"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006193"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-203"
},
{
"db": "NVD",
"id": "CVE-2013-2670"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2013-05291"
},
{
"db": "VULHUB",
"id": "VHN-62672"
},
{
"db": "BID",
"id": "59720"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006193"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-203"
},
{
"db": "NVD",
"id": "CVE-2013-2670"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05291"
},
{
"date": "2014-03-14T00:00:00",
"db": "VULHUB",
"id": "VHN-62672"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59720"
},
{
"date": "2014-03-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-006193"
},
{
"date": "2013-05-08T02:27:54",
"db": "PACKETSTORM",
"id": "121553"
},
{
"date": "2013-05-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-203"
},
{
"date": "2014-03-14T14:55:04.280000",
"db": "NVD",
"id": "CVE-2013-2670"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05291"
},
{
"date": "2017-08-29T00:00:00",
"db": "VULHUB",
"id": "VHN-62672"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59720"
},
{
"date": "2014-03-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-006193"
},
{
"date": "2014-03-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-203"
},
{
"date": "2025-04-12T10:46:40.837000",
"db": "NVD",
"id": "CVE-2013-2670"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-203"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW Cross-site scripting vulnerability in printer firmware",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-006193"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "xss",
"sources": [
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-203"
}
],
"trust": 0.7
}
}
VAR-201403-0065
Vulnerability from variot - Updated: 2025-04-13 23:14Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware G (1.03) allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/log_to_net.html or (2) kind parameter to fax/copy_settings.html, a different vulnerability than CVE-2013-2670 and CVE-2013-2671. Brother MFC-9970CDW The printer firmware contains a cross-site scripting vulnerability. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. A remote attacker can exploit a vulnerability to gain sensitive information or hijack a user's session. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
=========================================
Brother MFC-9970CDW Firmware 0D
Date: Jan. 13, 2013
URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html
=========================================
Keywords
=========================================
XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit, Zero Day, Brother MFC-9970 CDW
CVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673, CVE-2013-2674, CVE-2013-2675, CVE-2013-2676
=========================================
Summary
=========================================
A Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in January 2013. This document will introduce and discuss the vulnerability and provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware L Version 1.10 Released on July 9, 2012, and prior versions.
=========================================
Overview
=========================================
Brother Industries, Ltd. is a multinational electronics and electrical equipment company headquartered in Nagoya, Japan. Its products include printers, multifunction printers, sewing machines, large machine tools, label printers, typewriters, fax machines, and other computer-related electronics. Brother distributes its products both under its own name and under OEM agreements with other companies. It produces high-impact color output at impressive print and copy speeds of up to 30ppm and offers flexible connectivity with wireless, Ethernet and USB interfaces. It features a 5" Color Touch Screen display for easy navigation and menu selection. Also, this flagship model offers automatic duplex print/copy/scan/fax and optional high yield toner cartridges to help lower your operating costs \x96 making this all-in-one a smart choice for a business or workgroup.
=========================================
The Bug
=========================================
Reflected Cross Site Scripting, CWE-79
=========================================
Vulnerable Parameters = id , val, kind + Query String
Signature = ">alert(1)
=========================================
Version Identification
=========================================
Brother MFC-9970CDW - Version Identification - Firmware \x93L\x94 Version 1.10
Brother MFC-9970CDW - Version Identification - Firmware \x93G\x94
=========================================
PoC
=========================================
PoC URL
http://my.vulnerable.printer/admin/admin_main.html?id=websettings"> alert(1)
=========================================
CVE Information
=========================================
CVE-2013-2507 is specific to Firmware G.
XSS at:
admin/log_to_net.html id parameter
fax/copy_settings.html kind parameter
CVE-2013-2670 is for the issue that is present in both the Firmware G report and Firmware L.
XSS at:
admin/admin_main.html name of an arbitrarily assigned URL parameter
CVE-2013-2671 is for the XSS issues that are only present in Firmware L.
CVEs for Firmware L:
Cleartext submission of password CVE-2013-2672
Password field with autocomplete enabled CVE-2013-2673
Cross-domain Referer leakage CVE-2013-2674
Frameable response (Clickjacking) CVE-2013-2675
Private IP addresses disclosed CVE-2013-2676
CVSS 2 Score = 4.5
Timeline
Attempt contact via e-mail in January 2013.
Call the Toll Free Support Line in March 2013.
Callback from Vendor in April 2013.
E-mail sent to Vendor in April 2013.
VENDOR UNRESPONSIVE
Published May 3, 2013
Hoyt LLC Research Public Domain Report
http://xss.cx/
=========================================
END
=========================================
-----BEGIN PGP SIGNATURE----- Version: 10.2.0.2526
wsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx 1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv AIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb 4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8 nSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG VQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg== =Ua1o -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201403-0065",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.6,
"vendor": "brother",
"version": "g\\(1.03\\)"
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9970cdw",
"scope": null,
"trust": 0.8,
"vendor": "brother industry",
"version": null
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industry",
"version": "g (1.03)"
},
{
"model": "mfc-9970cdw l",
"scope": "eq",
"trust": 0.6,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw frimware g",
"scope": null,
"trust": 0.3,
"vendor": "brother",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05290"
},
{
"db": "BID",
"id": "59719"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006192"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-204"
},
{
"db": "NVD",
"id": "CVE-2013-2507"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:brother:mfc-9970cdw",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:brother:mfc-9970cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-006192"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hoyt LLC Research",
"sources": [
{
"db": "BID",
"id": "59719"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-204"
}
],
"trust": 0.9
},
"cve": "CVE-2013-2507",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "CVE-2013-2507",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CNVD-2013-05290",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "VHN-62509",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:N/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-2507",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2013-2507",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2013-05290",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201305-204",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-62509",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05290"
},
{
"db": "VULHUB",
"id": "VHN-62509"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006192"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-204"
},
{
"db": "NVD",
"id": "CVE-2013-2507"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware G (1.03) allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/log_to_net.html or (2) kind parameter to fax/copy_settings.html, a different vulnerability than CVE-2013-2670 and CVE-2013-2671. Brother MFC-9970CDW The printer firmware contains a cross-site scripting vulnerability. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. A remote attacker can exploit a vulnerability to gain sensitive information or hijack a user\u0027s session. \nAn attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=========================================\n\nBrother MFC-9970CDW Firmware 0D\n\nDate: Jan. 13, 2013\n\nURL:\nhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html\n\n=========================================\n\nKeywords\n\n=========================================\n\nXSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit,\nZero Day, Brother MFC-9970 CDW\n\nCVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673,\nCVE-2013-2674, CVE-2013-2675, CVE-2013-2676\n\n=========================================\n\nSummary\n\n=========================================\n\nA Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in\nJanuary 2013. This document will introduce and discuss the vulnerability\nand provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware\nL Version 1.10 Released on July 9, 2012, and prior versions. \n\n=========================================\n\nOverview\n\n=========================================\n\nBrother Industries, Ltd. is a multinational electronics and electrical\nequipment company headquartered in Nagoya, Japan. Its products include\nprinters, multifunction printers, sewing machines, large machine tools,\nlabel printers, typewriters, fax machines, and other computer-related\nelectronics. Brother distributes its products both under its own name and\nunder OEM agreements with other companies. It produces high-impact color output at impressive\nprint and copy speeds of up to 30ppm and offers flexible connectivity with\nwireless, Ethernet and USB interfaces. It features a 5\" Color Touch Screen\ndisplay for easy navigation and menu selection. Also, this flagship model\noffers automatic duplex print/copy/scan/fax and optional high yield toner\ncartridges to help lower your operating costs \\x96 making this all-in-one a\nsmart choice for a business or workgroup. \n\n=========================================\n\nThe Bug\n\n=========================================\n\nReflected Cross Site Scripting, CWE-79\n\n=========================================\n\nVulnerable Parameters = id , val, kind + Query String\n\nSignature = \"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\n\n=========================================\n\nVersion Identification\n\n=========================================\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93L\\x94 Version\n1.10\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93G\\x94\n\n=========================================\n\nPoC\n\n=========================================\n\nPoC URL\n\nhttp://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e\nalert(1)\u003c/script\u003e\n\n=========================================\n\nCVE Information\n\n=========================================\n\nCVE-2013-2507 is specific to Firmware G. \n\nXSS at:\n\n admin/log_to_net.html id parameter\n\n fax/copy_settings.html kind parameter\n\nCVE-2013-2670 is for the issue that is present in both the Firmware G\nreport and Firmware L. \n\nXSS at:\n\n admin/admin_main.html name of an arbitrarily assigned URL parameter\n\nCVE-2013-2671 is for the XSS issues that are only present in Firmware L. \n\nCVEs for Firmware L:\n\nCleartext submission of password CVE-2013-2672\n\nPassword field with autocomplete enabled CVE-2013-2673\n\nCross-domain Referer leakage CVE-2013-2674\n\nFrameable response (Clickjacking) CVE-2013-2675\n\nPrivate IP addresses disclosed CVE-2013-2676\n\nCVSS 2 Score = 4.5\n\nTimeline\n\nAttempt contact via e-mail in January 2013. \n\nCall the Toll Free Support Line in March 2013. \n\nCallback from Vendor in April 2013. \n\nE-mail sent to Vendor in April 2013. \n\nVENDOR UNRESPONSIVE\n\nPublished May 3, 2013\n\nHoyt LLC Research Public Domain\nReport\n\nhttp://xss.cx/\n\n=========================================\n\nEND\n\n=========================================\n\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: 10.2.0.2526\n\nwsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx\n1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv\nAIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb\n4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8\nnSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG\nVQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg==\n=Ua1o\n-----END PGP SIGNATURE-----\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-2507"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006192"
},
{
"db": "CNVD",
"id": "CNVD-2013-05290"
},
{
"db": "BID",
"id": "59719"
},
{
"db": "VULHUB",
"id": "VHN-62509"
},
{
"db": "PACKETSTORM",
"id": "121553"
}
],
"trust": 2.61
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-62509",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-62509"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-2507",
"trust": 3.5
},
{
"db": "PACKETSTORM",
"id": "121553",
"trust": 2.6
},
{
"db": "OSVDB",
"id": "93066",
"trust": 2.5
},
{
"db": "OSVDB",
"id": "93067",
"trust": 2.5
},
{
"db": "BID",
"id": "59719",
"trust": 1.6
},
{
"db": "XF",
"id": "84096",
"trust": 1.4
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006192",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201305-204",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2013-05290",
"trust": 0.6
},
{
"db": "XF",
"id": "9970",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-62509",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05290"
},
{
"db": "VULHUB",
"id": "VHN-62509"
},
{
"db": "BID",
"id": "59719"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006192"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-204"
},
{
"db": "NVD",
"id": "CVE-2013-2507"
}
]
},
"id": "VAR-201403-0065",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05290"
},
{
"db": "VULHUB",
"id": "VHN-62509"
}
],
"trust": 1.3129032399999998
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05290"
}
]
},
"last_update_date": "2025-04-13T23:14:54.868000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 1.6,
"url": "http://brother.jp/product/printer/mfc/mfc9970cdw/index.htm"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-006192"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-79",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-62509"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006192"
},
{
"db": "NVD",
"id": "CVE-2013-2507"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.7,
"url": "http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html"
},
{
"trust": 2.5,
"url": "http://packetstormsecurity.com/files/121553/brother-mfc-9970cdw-firmware-0d-cross-site-scripting.html"
},
{
"trust": 2.5,
"url": "http://osvdb.org/93066"
},
{
"trust": 2.5,
"url": "http://osvdb.org/93067"
},
{
"trust": 1.7,
"url": "http://osvdb.org/ref/93/brother-mfc-9970cdw-firmware-g-v103-by-hoyt-03072013.html"
},
{
"trust": 1.4,
"url": "http://xforce.iss.net/xforce/xfdb/84096"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84096"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2507"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-2507"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/bid/59719"
},
{
"trust": 0.3,
"url": "http://www.brother.com"
},
{
"trust": 0.3,
"url": "http://www.brother-usa.com/mfc/modeldetail/4/mfc9970cdw/overview#.uyoaxzdi1ch"
},
{
"trust": 0.1,
"url": "http://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e"
},
{
"trust": 0.1,
"url": "http://xss.cx/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2507"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2671"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2674"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2670"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2676"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2672"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2675"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2673"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05290"
},
{
"db": "VULHUB",
"id": "VHN-62509"
},
{
"db": "BID",
"id": "59719"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006192"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-204"
},
{
"db": "NVD",
"id": "CVE-2013-2507"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2013-05290"
},
{
"db": "VULHUB",
"id": "VHN-62509"
},
{
"db": "BID",
"id": "59719"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006192"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-204"
},
{
"db": "NVD",
"id": "CVE-2013-2507"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05290"
},
{
"date": "2014-03-14T00:00:00",
"db": "VULHUB",
"id": "VHN-62509"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59719"
},
{
"date": "2014-03-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-006192"
},
{
"date": "2013-05-08T02:27:54",
"db": "PACKETSTORM",
"id": "121553"
},
{
"date": "2013-05-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-204"
},
{
"date": "2014-03-14T14:55:04.250000",
"db": "NVD",
"id": "CVE-2013-2507"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05290"
},
{
"date": "2017-08-29T00:00:00",
"db": "VULHUB",
"id": "VHN-62509"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59719"
},
{
"date": "2014-03-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-006192"
},
{
"date": "2014-03-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-204"
},
{
"date": "2025-04-12T10:46:40.837000",
"db": "NVD",
"id": "CVE-2013-2507"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-204"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW Cross-site scripting vulnerability in printer firmware",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-006192"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "xss",
"sources": [
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-204"
}
],
"trust": 0.7
}
}
VAR-201403-0046
Vulnerability from variot - Updated: 2025-04-13 23:14Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware L (1.10) allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) val parameter to admin/admin_main.html; (3) id, (4) val, or (5) arbitrary parameter name (QUERY_STRING) to admin/profile_settings_net.html; or (6) kind or (7) arbitrary parameter name (QUERY_STRING) to fax/general_setup.html, a different vulnerability than CVE-2013-2507 and CVE-2013-2670. Brother MFC-9970CDW The printer firmware contains a cross-site scripting vulnerability. This vulnerability CVE-2013-2507 and CVE-2013-2670 Is a different vulnerability.By any third party, any Web Script or HTML May be inserted. (1) admin/admin_main.html of id Parameters (2) admin/admin_main.html of val Parameters (3) admin/profile_settings_net.html of id Parameters (4) admin/profile_settings_net.html of val Parameters (5) admin/profile_settings_net.html Any parameter name (QUERY_STRING) (6) fax/general_setup.html of kind Parameters (7) fax/general_setup.html Any parameter name (QUERY_STRING). The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. Because the program fails to properly handle user-supplied input, an attacker can exploit the vulnerability to execute arbitrary script code in the context of the affected browser. This may allow an attacker to steal cookie-based authentication credentials. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
=========================================
Brother MFC-9970CDW Firmware 0D
Date: Jan. 13, 2013
URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html
=========================================
Keywords
=========================================
XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit, Zero Day, Brother MFC-9970 CDW
CVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673, CVE-2013-2674, CVE-2013-2675, CVE-2013-2676
=========================================
Summary
=========================================
A Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in January 2013. This document will introduce and discuss the vulnerability and provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware L Version 1.10 Released on July 9, 2012, and prior versions.
=========================================
Overview
=========================================
Brother Industries, Ltd. is a multinational electronics and electrical equipment company headquartered in Nagoya, Japan. Its products include printers, multifunction printers, sewing machines, large machine tools, label printers, typewriters, fax machines, and other computer-related electronics. Brother distributes its products both under its own name and under OEM agreements with other companies. It produces high-impact color output at impressive print and copy speeds of up to 30ppm and offers flexible connectivity with wireless, Ethernet and USB interfaces. It features a 5" Color Touch Screen display for easy navigation and menu selection. Also, this flagship model offers automatic duplex print/copy/scan/fax and optional high yield toner cartridges to help lower your operating costs \x96 making this all-in-one a smart choice for a business or workgroup.
=========================================
The Bug
=========================================
Reflected Cross Site Scripting, CWE-79
=========================================
Vulnerable Parameters = id , val, kind + Query String
Signature = ">alert(1)
=========================================
Version Identification
=========================================
Brother MFC-9970CDW - Version Identification - Firmware \x93L\x94 Version 1.10
Brother MFC-9970CDW - Version Identification - Firmware \x93G\x94
=========================================
PoC
=========================================
PoC URL
http://my.vulnerable.printer/admin/admin_main.html?id=websettings"> alert(1)
=========================================
CVE Information
=========================================
CVE-2013-2507 is specific to Firmware G.
XSS at:
admin/log_to_net.html id parameter
fax/copy_settings.html kind parameter
CVE-2013-2670 is for the issue that is present in both the Firmware G report and Firmware L.
XSS at:
admin/admin_main.html name of an arbitrarily assigned URL parameter
CVE-2013-2671 is for the XSS issues that are only present in Firmware L.
CVEs for Firmware L:
Cleartext submission of password CVE-2013-2672
Password field with autocomplete enabled CVE-2013-2673
Cross-domain Referer leakage CVE-2013-2674
Frameable response (Clickjacking) CVE-2013-2675
Private IP addresses disclosed CVE-2013-2676
CVSS 2 Score = 4.5
Timeline
Attempt contact via e-mail in January 2013.
Call the Toll Free Support Line in March 2013.
Callback from Vendor in April 2013.
E-mail sent to Vendor in April 2013.
VENDOR UNRESPONSIVE
Published May 3, 2013
Hoyt LLC Research Public Domain Report
http://xss.cx/
=========================================
END
=========================================
-----BEGIN PGP SIGNATURE----- Version: 10.2.0.2526
wsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx 1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv AIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb 4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8 nSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG VQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg== =Ua1o -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201403-0046",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.6,
"vendor": "brother",
"version": "l\\(1.10\\)"
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9970cdw",
"scope": null,
"trust": 0.8,
"vendor": "brother industry",
"version": null
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industry",
"version": "l (1.10)"
},
{
"model": "mfc-9970cdw l",
"scope": "eq",
"trust": 0.6,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw frimware l",
"scope": "eq",
"trust": 0.3,
"vendor": "brother",
"version": "1.10"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-01795"
},
{
"db": "BID",
"id": "59723"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006194"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-201"
},
{
"db": "NVD",
"id": "CVE-2013-2671"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:brother:mfc-9970cdw",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:brother:mfc-9970cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-006194"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hoyt LLC Research",
"sources": [
{
"db": "BID",
"id": "59723"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-201"
}
],
"trust": 0.9
},
"cve": "CVE-2013-2671",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "CVE-2013-2671",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "CNVD-2014-01795",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "VHN-62673",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:N/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-2671",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2013-2671",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2014-01795",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201305-201",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-62673",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-01795"
},
{
"db": "VULHUB",
"id": "VHN-62673"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006194"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-201"
},
{
"db": "NVD",
"id": "CVE-2013-2671"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware L (1.10) allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) val parameter to admin/admin_main.html; (3) id, (4) val, or (5) arbitrary parameter name (QUERY_STRING) to admin/profile_settings_net.html; or (6) kind or (7) arbitrary parameter name (QUERY_STRING) to fax/general_setup.html, a different vulnerability than CVE-2013-2507 and CVE-2013-2670. Brother MFC-9970CDW The printer firmware contains a cross-site scripting vulnerability. This vulnerability CVE-2013-2507 and CVE-2013-2670 Is a different vulnerability.By any third party, any Web Script or HTML May be inserted. (1) admin/admin_main.html of id Parameters (2) admin/admin_main.html of val Parameters (3) admin/profile_settings_net.html of id Parameters (4) admin/profile_settings_net.html of val Parameters (5) admin/profile_settings_net.html Any parameter name (QUERY_STRING) (6) fax/general_setup.html of kind Parameters (7) fax/general_setup.html Any parameter name (QUERY_STRING). The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. Because the program fails to properly handle user-supplied input, an attacker can exploit the vulnerability to execute arbitrary script code in the context of the affected browser. This may allow an attacker to steal cookie-based authentication credentials. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=========================================\n\nBrother MFC-9970CDW Firmware 0D\n\nDate: Jan. 13, 2013\n\nURL:\nhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html\n\n=========================================\n\nKeywords\n\n=========================================\n\nXSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit,\nZero Day, Brother MFC-9970 CDW\n\nCVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673,\nCVE-2013-2674, CVE-2013-2675, CVE-2013-2676\n\n=========================================\n\nSummary\n\n=========================================\n\nA Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in\nJanuary 2013. This document will introduce and discuss the vulnerability\nand provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware\nL Version 1.10 Released on July 9, 2012, and prior versions. \n\n=========================================\n\nOverview\n\n=========================================\n\nBrother Industries, Ltd. is a multinational electronics and electrical\nequipment company headquartered in Nagoya, Japan. Its products include\nprinters, multifunction printers, sewing machines, large machine tools,\nlabel printers, typewriters, fax machines, and other computer-related\nelectronics. Brother distributes its products both under its own name and\nunder OEM agreements with other companies. It produces high-impact color output at impressive\nprint and copy speeds of up to 30ppm and offers flexible connectivity with\nwireless, Ethernet and USB interfaces. It features a 5\" Color Touch Screen\ndisplay for easy navigation and menu selection. Also, this flagship model\noffers automatic duplex print/copy/scan/fax and optional high yield toner\ncartridges to help lower your operating costs \\x96 making this all-in-one a\nsmart choice for a business or workgroup. \n\n=========================================\n\nThe Bug\n\n=========================================\n\nReflected Cross Site Scripting, CWE-79\n\n=========================================\n\nVulnerable Parameters = id , val, kind + Query String\n\nSignature = \"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\n\n=========================================\n\nVersion Identification\n\n=========================================\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93L\\x94 Version\n1.10\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93G\\x94\n\n=========================================\n\nPoC\n\n=========================================\n\nPoC URL\n\nhttp://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e\nalert(1)\u003c/script\u003e\n\n=========================================\n\nCVE Information\n\n=========================================\n\nCVE-2013-2507 is specific to Firmware G. \n\nXSS at:\n\n admin/log_to_net.html id parameter\n\n fax/copy_settings.html kind parameter\n\nCVE-2013-2670 is for the issue that is present in both the Firmware G\nreport and Firmware L. \n\nXSS at:\n\n admin/admin_main.html name of an arbitrarily assigned URL parameter\n\nCVE-2013-2671 is for the XSS issues that are only present in Firmware L. \n\nCVEs for Firmware L:\n\nCleartext submission of password CVE-2013-2672\n\nPassword field with autocomplete enabled CVE-2013-2673\n\nCross-domain Referer leakage CVE-2013-2674\n\nFrameable response (Clickjacking) CVE-2013-2675\n\nPrivate IP addresses disclosed CVE-2013-2676\n\nCVSS 2 Score = 4.5\n\nTimeline\n\nAttempt contact via e-mail in January 2013. \n\nCall the Toll Free Support Line in March 2013. \n\nCallback from Vendor in April 2013. \n\nE-mail sent to Vendor in April 2013. \n\nVENDOR UNRESPONSIVE\n\nPublished May 3, 2013\n\nHoyt LLC Research Public Domain\nReport\n\nhttp://xss.cx/\n\n=========================================\n\nEND\n\n=========================================\n\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: 10.2.0.2526\n\nwsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx\n1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv\nAIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb\n4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8\nnSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG\nVQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg==\n=Ua1o\n-----END PGP SIGNATURE-----\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-2671"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006194"
},
{
"db": "CNVD",
"id": "CNVD-2014-01795"
},
{
"db": "BID",
"id": "59723"
},
{
"db": "VULHUB",
"id": "VHN-62673"
},
{
"db": "PACKETSTORM",
"id": "121553"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-2671",
"trust": 3.5
},
{
"db": "PACKETSTORM",
"id": "121553",
"trust": 2.6
},
{
"db": "OSVDB",
"id": "93093",
"trust": 2.5
},
{
"db": "OSVDB",
"id": "93092",
"trust": 2.5
},
{
"db": "BID",
"id": "59723",
"trust": 1.6
},
{
"db": "XF",
"id": "84093",
"trust": 1.4
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006194",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2014-01795",
"trust": 0.6
},
{
"db": "XF",
"id": "9970",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201305-201",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-62673",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-01795"
},
{
"db": "VULHUB",
"id": "VHN-62673"
},
{
"db": "BID",
"id": "59723"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006194"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-201"
},
{
"db": "NVD",
"id": "CVE-2013-2671"
}
]
},
"id": "VAR-201403-0046",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-01795"
},
{
"db": "VULHUB",
"id": "VHN-62673"
}
],
"trust": 1.3129032399999998
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-01795"
}
]
},
"last_update_date": "2025-04-13T23:14:54.793000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.brother.com"
},
{
"title": "MFC-9970CDW",
"trust": 0.8,
"url": "http://brother.jp/product/printer/mfc/mfc9970cdw/index.htm"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-006194"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-79",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-62673"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006194"
},
{
"db": "NVD",
"id": "CVE-2013-2671"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://packetstormsecurity.com/files/121553/brother-mfc-9970cdw-firmware-0d-cross-site-scripting.html"
},
{
"trust": 2.5,
"url": "http://osvdb.org/93092"
},
{
"trust": 2.5,
"url": "http://osvdb.org/93093"
},
{
"trust": 2.1,
"url": "http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html"
},
{
"trust": 1.7,
"url": "http://osvdb.org/ref/93/brother-mfc9970cdw-firmware-l-110-hoytllc-report.html"
},
{
"trust": 1.4,
"url": "http://xforce.iss.net/xforce/xfdb/84093"
},
{
"trust": 1.2,
"url": "http://www.securityfocus.com/bid/59723"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84093"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2671"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-2671"
},
{
"trust": 0.3,
"url": "http://www.brother.com"
},
{
"trust": 0.3,
"url": "http://www.brother-usa.com/mfc/modeldetail/4/mfc9970cdw/overview#.uyoaxzdi1ch"
},
{
"trust": 0.1,
"url": "http://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e"
},
{
"trust": 0.1,
"url": "http://xss.cx/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2507"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2671"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2674"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2670"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2676"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2672"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2675"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2673"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-01795"
},
{
"db": "VULHUB",
"id": "VHN-62673"
},
{
"db": "BID",
"id": "59723"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006194"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-201"
},
{
"db": "NVD",
"id": "CVE-2013-2671"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2014-01795"
},
{
"db": "VULHUB",
"id": "VHN-62673"
},
{
"db": "BID",
"id": "59723"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-006194"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-201"
},
{
"db": "NVD",
"id": "CVE-2013-2671"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-03-19T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-01795"
},
{
"date": "2014-03-14T00:00:00",
"db": "VULHUB",
"id": "VHN-62673"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59723"
},
{
"date": "2014-03-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-006194"
},
{
"date": "2013-05-08T02:27:54",
"db": "PACKETSTORM",
"id": "121553"
},
{
"date": "2013-05-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-201"
},
{
"date": "2014-03-14T14:55:04.297000",
"db": "NVD",
"id": "CVE-2013-2671"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-03-19T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-01795"
},
{
"date": "2017-08-29T00:00:00",
"db": "VULHUB",
"id": "VHN-62673"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59723"
},
{
"date": "2014-03-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-006194"
},
{
"date": "2014-03-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-201"
},
{
"date": "2025-04-12T10:46:40.837000",
"db": "NVD",
"id": "CVE-2013-2671"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-201"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW Cross-site scripting vulnerability in printer firmware",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-006194"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "xss",
"sources": [
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-201"
}
],
"trust": 0.7
}
}
VAR-202003-0790
Vulnerability from variot - Updated: 2024-11-23 22:48Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to execute arbitrary code on the device. plural Brother The printer contains a vulnerability related to out-of-bounds writing.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. Brother Industries HL-L8360CDW is a multi-function printer from Brother Industries, Japan
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202003-0790",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "dcp-j572dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j582n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2552dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2771dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3745cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2551dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5500dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8260cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j815dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-7880dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5945dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6902dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j972n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2386dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-3160cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2713dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-t4000dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6000cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2710dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6200dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2372dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7520dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2371dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2357dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6250dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6997cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2685dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2560dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-b2080dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1910w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2710dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-7180dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7530dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1222we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9570cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5200dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1617nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j774dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2366dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t510w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-9030cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5595dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3230cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-3600w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3730cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8610cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j903n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1223we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5900dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dwxl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j898n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t910dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3770cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5100dnt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5650dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-7195dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-7895dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-3000n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1919nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-3190cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1623we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j3930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-5590dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5102dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2541dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6545dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6950dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2770dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8540dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j2730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-2800w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j738dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2365dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2551dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j805dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2715dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2705dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j973n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2712dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "fax-l2710dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9570cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1218w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwg",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j895dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3750cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j982n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6935dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j3530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5802dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j890dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3710cw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1605dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1911w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3270cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6402dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1618w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "fax-l2700dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3230cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1300dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5502dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-2400n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l6600dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5330dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dwg",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t810w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6545dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1623wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5845dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5630cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j577n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6583cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j805dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5702dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8690cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dwx",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5850dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dwxl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2376dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6202dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l9310cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6995cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2520dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j497dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2717dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2395dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-b2050dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5830dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l8410cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j572n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2390dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6980cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6983cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2340dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j981n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3517cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2707dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6250dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t710w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8260cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1911nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2531dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j893n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3550cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j491dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j995dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6702dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t810w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5100dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9577cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j995dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1915w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j978n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6947dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2730dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2751dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2732dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5202dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2385dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2537dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1615nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1616nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5600dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j978n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2350dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2532dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3510cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9150cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t510w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2712dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwx",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3210cw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2715dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j2330dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2315dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2752dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1622we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-2595dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3551cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6450dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-2560dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2365dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1910we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8530dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8535dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2703dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6300dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1500n\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2361dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6970dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-b7715dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2716dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j690dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9350cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2375dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6100dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1211w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6000dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t4500dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2680w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2340dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5845dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6800dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3290cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3735cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j1100dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j772dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2380dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6945dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j998dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5755dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2352dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5800dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5902dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t710w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j738dwn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1912wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2701dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1916nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2351dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5602dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5200dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-b7720dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j988n\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2560dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j982n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6999cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5652dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j998dwn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2305w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6200dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j973n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5700dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5335dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8900cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8610cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2520dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6300dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6580cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5755dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industries",
"version": "1.20"
},
{
"model": "industries hl-l8360cdw",
"scope": "eq",
"trust": 0.6,
"vendor": "brother",
"version": "1.20"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:hl-l8360cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
}
]
},
"cve": "CVE-2019-13192",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2019-13192",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 10.0,
"confidentialityImpact": "Complete",
"exploitabilityScore": null,
"id": "JVNDB-2019-015083",
"impactScore": null,
"integrityImpact": "Complete",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2020-20738",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-13192",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2019-015083",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-13192",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "JVNDB-2019-015083",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNVD",
"id": "CNVD-2020-20738",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-202003-855",
"trust": 0.6,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-855"
},
{
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to execute arbitrary code on the device. plural Brother The printer contains a vulnerability related to out-of-bounds writing.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. Brother Industries HL-L8360CDW is a multi-function printer from Brother Industries, Japan",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-13192"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "CNVD",
"id": "CNVD-2020-20738"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-13192",
"trust": 3.0
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2020-20738",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202003-855",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-855"
},
{
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"id": "VAR-202003-0790",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
}
],
"trust": 1.4522727272727272
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
}
]
},
"last_update_date": "2024-11-23T22:48:07.476000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "faq00100670_000",
"trust": 0.8,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us\u0026lang=en\u0026prod=group2\u0026faqid=faq00100670_000"
},
{
"title": "Patch for Brother Industries HL-L8360CDW buffer overflow vulnerability (CNVD-2020-20738)",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/212015"
},
{
"title": "Brother HL-L8360CDW Buffer error vulnerability fix",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=112075"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-855"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-787",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-13192"
},
{
"trust": 1.6,
"url": "https://global.brother"
},
{
"trust": 1.6,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us\u0026lang=en\u0026prod=group2\u0026faqid=faq00100670_000"
},
{
"trust": 1.6,
"url": "https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-brother-printers/"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-13192"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-855"
},
{
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-855"
},
{
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"date": "2020-04-03T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"date": "2020-03-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-855"
},
{
"date": "2020-03-13T19:15:15.900000",
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-20738"
},
{
"date": "2020-04-03T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-015083"
},
{
"date": "2020-04-02T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-855"
},
{
"date": "2024-11-21T04:24:24.253000",
"db": "NVD",
"id": "CVE-2019-13192"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-855"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Brother Out-of-bounds write vulnerabilities in printers",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015083"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-855"
}
],
"trust": 0.6
}
}
VAR-201806-0944
Vulnerability from variot - Updated: 2024-11-23 22:45Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via the url parameter to etc/loginerror.html. Brother HL-L2340D and HL-L2380DW Contains a cross-site scripting vulnerability.Information may be obtained and information may be altered
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201806-0944",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "hl-l2340d",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.16"
},
{
"model": "hl-l2380dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.16"
},
{
"model": "hl-l2340d",
"scope": null,
"trust": 0.8,
"vendor": "brother industry",
"version": null
},
{
"model": "hl-l2380dw",
"scope": null,
"trust": 0.8,
"vendor": "brother industry",
"version": null
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-004549"
},
{
"db": "NVD",
"id": "CVE-2018-11581"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:hl-l2340d_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:brother:hl-l2380dw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-004549"
}
]
},
"cve": "CVE-2018-11581",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"confidentialityImpact": "NONE",
"exploitabilityScore": 6.8,
"id": "CVE-2018-11581",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "LOW",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"exploitabilityScore": 1.7,
"id": "CVE-2018-11581",
"impactScore": 2.7,
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"trust": 1.8,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2018-11581",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2018-11581",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-201806-123",
"trust": 0.6,
"value": "LOW"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-004549"
},
{
"db": "CNNVD",
"id": "CNNVD-201806-123"
},
{
"db": "NVD",
"id": "CVE-2018-11581"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via the url parameter to etc/loginerror.html. Brother HL-L2340D and HL-L2380DW Contains a cross-site scripting vulnerability.Information may be obtained and information may be altered",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-11581"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-004549"
}
],
"trust": 1.62
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-11581",
"trust": 2.4
},
{
"db": "EXPLOIT-DB",
"id": "44839",
"trust": 1.8
},
{
"db": "JVNDB",
"id": "JVNDB-2018-004549",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201806-123",
"trust": 0.6
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-004549"
},
{
"db": "CNNVD",
"id": "CNNVD-201806-123"
},
{
"db": "NVD",
"id": "CVE-2018-11581"
}
]
},
"id": "VAR-201806-0944",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VARIoT devices database",
"id": null
}
],
"trust": 1.0
},
"last_update_date": "2024-11-23T22:45:18.018000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "https://www.brother-usa.com/"
},
{
"title": "Brother HL-L2340D and HL-L2380DW Fixes for Series Printer Cross-Site Scripting Vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=81319"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-004549"
},
{
"db": "CNNVD",
"id": "CNNVD-201806-123"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-79",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-004549"
},
{
"db": "NVD",
"id": "CVE-2018-11581"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.8,
"url": "https://www.exploit-db.com/exploits/44839/"
},
{
"trust": 1.0,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us_ot\u0026lang=en\u0026prod=group2\u0026ftype3=100033\u0026faqid=faq00100530_000"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-11581"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-11581"
},
{
"trust": 0.6,
"url": "https://gist.github.com/huykha/409451e4b086bfbd55e28e7e803ae930"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-004549"
},
{
"db": "CNNVD",
"id": "CNNVD-201806-123"
},
{
"db": "NVD",
"id": "CVE-2018-11581"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "JVNDB",
"id": "JVNDB-2018-004549"
},
{
"db": "CNNVD",
"id": "CNNVD-201806-123"
},
{
"db": "NVD",
"id": "CVE-2018-11581"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-06-22T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-004549"
},
{
"date": "2018-06-01T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201806-123"
},
{
"date": "2018-06-01T17:29:00.377000",
"db": "NVD",
"id": "CVE-2018-11581"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-06-22T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-004549"
},
{
"date": "2018-06-22T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201806-123"
},
{
"date": "2024-11-21T03:43:39.640000",
"db": "NVD",
"id": "CVE-2018-11581"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201806-123"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother HL-L2340D and HL-L2380DW Vulnerable to cross-site scripting",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-004549"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "XSS",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201806-123"
}
],
"trust": 0.6
}
}
VAR-202003-0792
Vulnerability from variot - Updated: 2024-11-23 22:41Some Brother printers (such as the HL-L8360CDW v1.20) were affected by different information disclosure vulnerabilities that provided sensitive information to an unauthenticated user who visits a specific URL. plural Brother Printers are vulnerable to information leakage.Information may be obtained. Brother Industries HL-L8360CDW is a multi-function printer from Brother Industries, Japan. The vulnerability stems from network system or product configuration errors during operation
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202003-0792",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "dcp-j572dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j582n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2552dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2771dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3745cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2551dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5500dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8260cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j815dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-7880dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5945dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6902dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j972n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2386dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-3160cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2713dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-t4000dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6000cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2710dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6200dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2372dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7520dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2371dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2357dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6250dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6997cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2685dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2560dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-b2080dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1910w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2710dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-7180dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7530dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1222we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9570cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5200dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1617nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j774dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2366dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t510w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-9030cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5595dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3230cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-3600w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3730cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8610cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j903n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1223we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5900dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dwxl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j898n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t910dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3770cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5100dnt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5650dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-7195dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-7895dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-3000n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1919nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-3190cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1623we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j3930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-5590dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5102dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2541dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6545dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6950dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2770dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8540dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j2730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-2800w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j738dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2365dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2551dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j805dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2715dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2705dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j973n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2712dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "fax-l2710dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9570cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1218w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwg",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j895dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3750cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j982n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6935dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j3530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5802dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j890dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3710cw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1605dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1911w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3270cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6402dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1618w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "fax-l2700dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3230cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1300dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5502dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-2400n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l6600dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5330dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dwg",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t810w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6545dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1623wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5845dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5630cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j577n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6583cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j805dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5702dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8690cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dwx",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5850dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dwxl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2376dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6202dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l9310cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6995cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2520dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j497dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2717dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2395dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-b2050dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5830dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l8410cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j572n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2390dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6980cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6983cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2340dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j981n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3517cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2707dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6250dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t710w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8260cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1911nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2531dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j893n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3550cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j491dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j995dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6702dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t810w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5100dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9577cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j995dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1915w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j978n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6947dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2730dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2751dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2732dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5202dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2385dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2537dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1615nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1616nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5600dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j978n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2350dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2532dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3510cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9150cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t510w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2712dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwx",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3210cw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2715dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j2330dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2315dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2752dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1622we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-2595dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3551cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6450dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-2560dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2365dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1910we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8530dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8535dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2703dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6300dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1500n\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2361dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6970dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-b7715dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2716dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j690dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9350cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2375dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6100dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1211w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6000dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t4500dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2680w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2340dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5845dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6800dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3290cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3735cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j1100dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j772dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2380dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6945dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j998dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5755dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2352dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5800dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5902dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t710w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j738dwn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1912wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2701dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1916nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2351dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5602dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5200dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-b7720dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j988n\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2560dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j982n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6999cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5652dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j998dwn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2305w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6200dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j973n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5700dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5335dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8900cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8610cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2520dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6300dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6580cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5755dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industries",
"version": "1.20"
},
{
"model": "industries hl-l8360cdw",
"scope": "eq",
"trust": 0.6,
"vendor": "brother",
"version": "1.20"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:hl-l8360cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
}
]
},
"cve": "CVE-2019-13194",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2019-13194",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.0,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2019-015069",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2020-20740",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-13194",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2019-015069",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-13194",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "JVNDB-2019-015069",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2020-20740",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-202003-854",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-854"
},
{
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Some Brother printers (such as the HL-L8360CDW v1.20) were affected by different information disclosure vulnerabilities that provided sensitive information to an unauthenticated user who visits a specific URL. plural Brother Printers are vulnerable to information leakage.Information may be obtained. Brother Industries HL-L8360CDW is a multi-function printer from Brother Industries, Japan. The vulnerability stems from network system or product configuration errors during operation",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-13194"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"db": "CNVD",
"id": "CNVD-2020-20740"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-13194",
"trust": 3.0
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2020-20740",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202003-854",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-854"
},
{
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"id": "VAR-202003-0792",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
}
],
"trust": 1.4522727272727272
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
}
]
},
"last_update_date": "2024-11-23T22:41:09.373000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "faq00100670_000",
"trust": 0.8,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us\u0026lang=en\u0026prod=group2\u0026faqid=faq00100670_000"
},
{
"title": "Patch for Brother Industries HL-L8360CDW Information Disclosure Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/212009"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-306",
"trust": 1.0
},
{
"problemtype": "CWE-200",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-13194"
},
{
"trust": 1.6,
"url": "https://global.brother"
},
{
"trust": 1.6,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us\u0026lang=en\u0026prod=group2\u0026faqid=faq00100670_000"
},
{
"trust": 1.6,
"url": "https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-brother-printers/"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-13194"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-854"
},
{
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-854"
},
{
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"date": "2020-04-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"date": "2020-03-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-854"
},
{
"date": "2020-03-13T19:15:16.057000",
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"date": "2020-04-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-015069"
},
{
"date": "2020-04-02T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-854"
},
{
"date": "2024-11-21T04:24:25.323000",
"db": "NVD",
"id": "CVE-2019-13194"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-854"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother Industries HL-L8360CDW Information Disclosure Vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20740"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-854"
}
],
"trust": 1.2
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-854"
}
],
"trust": 0.6
}
}
VAR-202003-0791
Vulnerability from variot - Updated: 2024-11-23 22:16Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parse the cookie value properly. This would allow an attacker to execute arbitrary code on the device. plural Brother The printer contains a vulnerability related to out-of-bounds writing.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. Brother Industries HL-L8360CDW is a multi-function printer from Brother Industries, Japan
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202003-0791",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "dcp-j572dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j582n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2552dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2771dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3745cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2551dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5500dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8260cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j815dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-7880dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5945dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6902dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j972n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2386dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-3160cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2713dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-t4000dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6000cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2710dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6200dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2372dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7520dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2371dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2357dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6250dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6997cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2685dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2560dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-b2080dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1910w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2710dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-7180dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7530dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1222we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9570cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5200dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1617nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j774dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2366dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t510w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-9030cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5595dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3230cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-3600w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3730cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8610cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j903n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1223we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5900dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dwxl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j898n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t910dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3770cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5100dnt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5650dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-7195dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-7895dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-3000n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1919nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-3190cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1623we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-b7535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j3930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-5590dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5102dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2541dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6545dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6950dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2770dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8540dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j2730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-2800w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j738dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2365dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2551dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j805dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2715dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2705dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j973n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2712dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "fax-l2710dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9570cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1218w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwg",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j895dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3750cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j982n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6935dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j3530dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5802dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j890dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3710cw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1605dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dnr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1911w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3270cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6402dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1618w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "fax-l2700dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3230cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1300dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5502dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "ads-2400n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l6600dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5330dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dwg",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t810w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6545dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210wvb",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1623wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5845dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5630cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j577n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6583cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j805dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5702dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8690cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2720dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dwx",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5850dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dwxl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2376dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6202dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l9310cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6995cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2520dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j497dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2717dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2395dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-b2050dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5830dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2700dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l8410cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j572n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2390dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6980cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6983cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2340dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j981n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3517cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2707dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6250dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t710w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8260cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1911nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2531dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j893n",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3550cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j491dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j995dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6702dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t810w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5100dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1610w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2550dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l9577cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5730dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j995dw xl",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1915w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j978n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6947dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2730dn\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2751dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2732dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5202dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6900dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1612w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2385dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2537dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1615nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1616nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5600dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j978n-b",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2350dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2532dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3510cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9150cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t510w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2712dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dwx",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2370dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3210cw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2715dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j2330dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2315dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2752dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-1622we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2535dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-2595dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l3551cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6450dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-2560dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2365dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1910we",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8530dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-8535dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2703dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5750dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6300dwt",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j1500n\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2750dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2361dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6970dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-b7715dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2716dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j690dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-9350cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2375dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6100dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1211w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5930dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-j6000dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-t4500dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2680w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2340dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5845dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6800dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2360dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l3290cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2540dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2740dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l3735cdn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j1100dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l6700dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j772dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2380dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6945dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j998dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5755dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2352dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6400dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5800dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5902dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-t710w\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j738dwn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1912wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l2701dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-1916nw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2351dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5602dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l5200dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-b7720dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j988n\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2560dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j982n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1210w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6999cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l5652dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j998dwn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l2305w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6200dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-j973n-w",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-1212wr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5700dn",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j5335dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8900cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l8610cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "dcp-l2520dwr",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l6300dw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-j6580cdw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "mfc-l5755dw\\",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": null
},
{
"model": "hl-l8360cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industries",
"version": "1.20"
},
{
"model": "industries hl-l8360cdw",
"scope": "eq",
"trust": 0.6,
"vendor": "brother",
"version": "1.20"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:hl-l8360cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
}
]
},
"cve": "CVE-2019-13193",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 9.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.0,
"id": "CVE-2019-13193",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "Single",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 9.0,
"confidentialityImpact": "Complete",
"exploitabilityScore": null,
"id": "JVNDB-2019-015084",
"impactScore": null,
"integrityImpact": "Complete",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 9.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.0,
"id": "CNVD-2020-20739",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2019-13193",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 8.8,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2019-015084",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "Low",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-13193",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "JVNDB-2019-015084",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2020-20739",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-202003-856",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-856"
},
{
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parse the cookie value properly. This would allow an attacker to execute arbitrary code on the device. plural Brother The printer contains a vulnerability related to out-of-bounds writing.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. Brother Industries HL-L8360CDW is a multi-function printer from Brother Industries, Japan",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-13193"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "CNVD",
"id": "CNVD-2020-20739"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-13193",
"trust": 3.0
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2020-20739",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202003-856",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-856"
},
{
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"id": "VAR-202003-0791",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
}
],
"trust": 1.4522727272727272
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
}
]
},
"last_update_date": "2024-11-23T22:16:36.991000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "faq00100670_000",
"trust": 0.8,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us\u0026lang=en\u0026prod=group2\u0026faqid=faq00100670_000"
},
{
"title": "Patch for Brother Industries HL-L8360CDW buffer overflow vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/212011"
},
{
"title": "Brother HL-L8360CDW Buffer error vulnerability fix",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=112076"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-856"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-787",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-13193"
},
{
"trust": 1.6,
"url": "https://global.brother"
},
{
"trust": 1.6,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us\u0026lang=en\u0026prod=group2\u0026faqid=faq00100670_000"
},
{
"trust": 1.6,
"url": "https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-brother-printers/"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-13193"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-856"
},
{
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-856"
},
{
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"date": "2020-04-03T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"date": "2020-03-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-856"
},
{
"date": "2020-03-13T19:15:15.963000",
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-04-01T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-20739"
},
{
"date": "2020-04-03T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-015084"
},
{
"date": "2020-04-02T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-856"
},
{
"date": "2024-11-21T04:24:24.753000",
"db": "NVD",
"id": "CVE-2019-13193"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-856"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Brother Out-of-bounds write vulnerabilities in printers",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-015084"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-856"
}
],
"trust": 0.6
}
}
VAR-202306-2258
Vulnerability from variot - Updated: 2024-08-14 14:30Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service (DoS) condition. As for the affected products/models/versions, see the detailed information provided by each vendor. This vulnerability information was reported to the product developer by the person below, and the reporter and the product developer JPCERT/CC It was announced after coordination with Reporter : Darren Johnson MrThe product may cause denial of service by processing specially crafted requests. (DoS) can become a state
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202306-2258",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "hl-l2365dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "hl-l2361dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "docuprint p115 w",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.11"
},
{
"model": "dcp-j767n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-l8610cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "g"
},
{
"model": "hl-1212wr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "hl-l2315dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.24"
},
{
"model": "mfc-j5630cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "dcp-j582n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "mfc-j485dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-l2720dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-j2330dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-j738dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "dcp-1610we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "dcp-1615nw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "r"
},
{
"model": "docuprint m115 z",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "mfc-j6535dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "dcp-1623we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "dcp-l2560dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "hl-l2365dwr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "dcp-j987n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "e"
},
{
"model": "docuprint m118 z",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "mfc-j5625dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "r"
},
{
"model": "mfc-l2703dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "mfc-j4725n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "h"
},
{
"model": "dcp-t710w\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "mfc-l2740dw\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "hl-l8360cdwt",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "mfc-j4625dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "u"
},
{
"model": "dcp-7180dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "hl-1212wvb",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "mfc-j997d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "hl-1218w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "mfc-j2320",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "dcp-j785dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "g"
},
{
"model": "mfc-l2700dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "hl-l2340dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.26"
},
{
"model": "mfc-1916nw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "mfc-l2700dwr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "mfc-j4620dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "u"
},
{
"model": "hl-l8260cdn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.15"
},
{
"model": "docuprint p118 w",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "dcp-j987n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "e"
},
{
"model": "dcp-j4220n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "mfc-j830d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "dcp-1623wr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "mfc-j6530dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "dcp-j774dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "dcp-t510w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j3930dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "dcp-1616nw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "r"
},
{
"model": "mfc-j4320dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "mfc-t810w\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "fax-l2700dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "q"
},
{
"model": "docuprint m115 w",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "dcp-1610wvb",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "hl-1222we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "dcp-j572dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "n"
},
{
"model": "dcp-j973n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "hl-1223we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "dcp-j962n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-1915w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "mfc-j898n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-l9570cdw\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "c"
},
{
"model": "docuprint m268 dw",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "mfc-l2700dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "mfc-j2730dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "y"
},
{
"model": "hl-l2360dnr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "mfc-j5520dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "r"
},
{
"model": "dcp-j978n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "mfc-l2707dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "dcp-l8410cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "g"
},
{
"model": "dcp-l2520dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "hl-1210wvb",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "mfc-j480dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "dcp-j772dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "dcp-j567n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "hl-l8260cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.15"
},
{
"model": "mfc-j985dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j6580cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "r"
},
{
"model": "mfc-j5330dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-l2720dwr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "hl-l8360cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "hl-1210wr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "dcp-j562n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "mfc-7880dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "q"
},
{
"model": "mfc-j5720cdw\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "j"
},
{
"model": "mfc-j3530dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-j690dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "mfc-t910dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "dcp-j577n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "mfc-j738dwn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "mfc-t810w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "hl-1223wr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "mfc-l2701dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "dcp-t510w\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "mfc-l9570cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "g"
},
{
"model": "mfc-j6935dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "e-studio 301dn",
"scope": "eq",
"trust": 1.0,
"vendor": "toshibatec",
"version": null
},
{
"model": "mfc-j5730dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "y"
},
{
"model": "mfc-j837d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "docuprint m225 dw",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "n"
},
{
"model": "docuprint m115 fw",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "mfc-j998dwn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "mfc-j460dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-1912wr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "hl-l2380dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "mfc-j885dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "docuprint m225 z",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "n"
},
{
"model": "dcp-1612wr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "mfc-j887n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "dcp-l2540dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "hl-l2366dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "mfc-j4420dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "dcp-j4225n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "h"
},
{
"model": "dcp-1610w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "mfc-j6983cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "dcp-l2540dnr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "dcp-j572n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "hl-l2360dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "mfc-j6980cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "docuprint m265 z",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "n"
},
{
"model": "mfc-j5920dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "q"
},
{
"model": "dcp-l2520dwr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-j880dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j893n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-j990d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "mfc-j5620cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "j"
},
{
"model": "docuprint m268 z",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "mfc-l2700dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "mfc-l2685dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "mfc-l2705dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "dcp-1610wr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "mfc-1910w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "mfc-j880n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "hl-1210we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "dcp-j4225n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "h"
},
{
"model": "dcp-j982n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "mfc-j491dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "docuprint m118 w",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "l"
},
{
"model": "dcp-j972n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "dcp-j982n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "mfc-l2720dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "dcp-t710w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "docuprint p268 d",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.21"
},
{
"model": "docuprint p225 d",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.17"
},
{
"model": "dcp-j762n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j4720n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "mfc-j5930dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "y"
},
{
"model": "mfc-j5720dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "q"
},
{
"model": "mfc-j730d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "mfc-j775dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j5620dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "r"
},
{
"model": "mfc-1911w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "mfc-1910we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "dcp-j963n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j5335dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "mfc-l2740dwr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "mfc-j497dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j895dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "mfc-l2700dnr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "dcp-j4220n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "dcp-j963n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "dcp-j978n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "hl-1212we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "mfc-j6930dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "mfc-j903n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "dcp-1612we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "hl-1211w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "dcp-l2540dw\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "mfc-j5320dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "mfc-l8610cdw\\",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "c"
},
{
"model": "dcp-j968n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "dcp-j973n-b",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "hl-l2360dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "mfc-j890dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "dcp-1618w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "mfc-j5830dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "y"
},
{
"model": "docuprint p265 dw",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.21"
},
{
"model": "dcp-1612wvb",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "mfc-j6730dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "w"
},
{
"model": "dcp-j587n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "e"
},
{
"model": "mfc-j737d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "mfc-l8690cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "g"
},
{
"model": "dcp-l2560dwr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "hl-1212w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "mfc-j998dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "mfc-1919nw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "dcp-1612w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "dcp-j562dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "l"
},
{
"model": "dcp-j968n-w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "hl-1210w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "e-studio 302dnf",
"scope": "eq",
"trust": 1.0,
"vendor": "toshibatec",
"version": null
},
{
"model": "dcp-l2540dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "dcp-l2541dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "mfc-j2720",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "q"
},
{
"model": "mfc-l2680w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "dcp-j981n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "x"
},
{
"model": "dcp-1622we",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "z"
},
{
"model": "dcp-j983n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "p"
},
{
"model": "dcp-j4120dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "m"
},
{
"model": "mfc-l9577cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "g"
},
{
"model": "mfc-l8900cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "g"
},
{
"model": "mfc-j680dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "mfc-j900d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "hl-2560dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.35"
},
{
"model": "mfc-1911nw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "t"
},
{
"model": "mfc-j6583cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "mfc-j907d\\ n",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "hl-l9310cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.20"
},
{
"model": "docuprint p268 dw",
"scope": "lt",
"trust": 1.0,
"vendor": "fujifilm",
"version": "1.21"
},
{
"model": "hl-l2305w",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.24"
},
{
"model": "mfc-l2740dw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "v"
},
{
"model": "mfc-j5820dn",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "k"
},
{
"model": "mfc-j6995cdw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "s"
},
{
"model": "hl-l2340dwr",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "1.26"
},
{
"model": "dcp-1617nw",
"scope": "lt",
"trust": 1.0,
"vendor": "brother",
"version": "r"
},
{
"model": "debut\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u30fc",
"scope": "eq",
"trust": 0.8,
"vendor": "\u30d6\u30e9\u30b6\u30fc\u5de5\u696d",
"version": null
},
{
"model": "debut\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u30fc",
"scope": null,
"trust": 0.8,
"vendor": "\u30d6\u30e9\u30b6\u30fc\u5de5\u696d",
"version": null
},
{
"model": "debut\u30a6\u30a7\u30d6\u30b5\u30fc\u30d0\u30fc",
"scope": "eq",
"trust": 0.8,
"vendor": "\u30d6\u30e9\u30b6\u30fc\u5de5\u696d",
"version": "debut web server 1.20 or 1.30 specific models/models/ s of products that implement"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"cve": "CVE-2023-29984",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2023-29984",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "OTHER",
"availabilityImpact": "Low",
"baseScore": 5.3,
"baseSeverity": "Medium",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "JVNDB-2023-002270",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2023-29984",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "OTHER",
"id": "JVNDB-2023-002270",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-202306-2193",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "CNNVD",
"id": "CNNVD-202306-2193"
},
{
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service (DoS) condition. As for the affected products/models/versions, see the detailed information provided by each vendor. This vulnerability information was reported to the product developer by the person below, and the reporter and the product developer JPCERT/CC It was announced after coordination with Reporter : Darren Johnson MrThe product may cause denial of service by processing specially crafted requests. (DoS) can become a state",
"sources": [
{
"db": "NVD",
"id": "CVE-2023-29984"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "VULMON",
"id": "CVE-2023-29984"
}
],
"trust": 1.71
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2023-29984",
"trust": 3.3
},
{
"db": "JVN",
"id": "JVNVU93767756",
"trust": 2.5
},
{
"db": "JVNDB",
"id": "JVNDB-2023-002270",
"trust": 1.4
},
{
"db": "CNNVD",
"id": "CNNVD-202306-2193",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2023-29984",
"trust": 0.1
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2023-29984"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "CNNVD",
"id": "CNNVD-202306-2193"
},
{
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"id": "VAR-202306-2258",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VARIoT devices database",
"id": null
}
],
"trust": 0.95
},
"last_update_date": "2024-08-14T14:30:26.024000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Vulnerability in web browser setting function of our printer",
"trust": 0.8,
"url": "https://faq.brother.co.jp/app/answers/detail/a_id/13702"
},
{
"title": "Brother MFPs Security vulnerabilities",
"trust": 0.6,
"url": "http://123.124.177.30/web/xxk/bdxqById.tag?id=245514"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "CNNVD",
"id": "CNNVD-202306-2193"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-476",
"trust": 1.0
},
{
"problemtype": "NULL Pointer dereference (CWE-476) [ others ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.7,
"url": "https://jvn.jp/en/vu/jvnvu93767756/index.html"
},
{
"trust": 1.7,
"url": "https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/browser_announce.html"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2023-29984"
},
{
"trust": 1.0,
"url": "https://support.brother.com/g/b/faqend.aspx?c=us\u0026lang=en\u0026prod=group2\u0026faqid=faq00100793_000"
},
{
"trust": 1.0,
"url": "https://support.brother.com/g/s/security/en/"
},
{
"trust": 0.8,
"url": "http://jvn.jp/vu/jvnvu93767756/index.html"
},
{
"trust": 0.7,
"url": "http://brother.com"
},
{
"trust": 0.6,
"url": "https://cxsecurity.com/cveshow/cve-2023-29984/"
},
{
"trust": 0.6,
"url": "https://jvndb.jvn.jp/en/contents/2023/jvndb-2023-002270.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2023-29984"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "CNNVD",
"id": "CNNVD-202306-2193"
},
{
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULMON",
"id": "CVE-2023-29984"
},
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"db": "CNNVD",
"id": "CNNVD-202306-2193"
},
{
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-07-11T00:00:00",
"db": "VULMON",
"id": "CVE-2023-29984"
},
{
"date": "2023-06-30T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"date": "2023-06-29T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202306-2193"
},
{
"date": "2023-07-11T20:15:10.700000",
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-07-12T00:00:00",
"db": "VULMON",
"id": "CVE-2023-29984"
},
{
"date": "2024-04-22T07:05:00",
"db": "JVNDB",
"id": "JVNDB-2023-002270"
},
{
"date": "2023-07-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202306-2193"
},
{
"date": "2023-11-07T04:11:39.737000",
"db": "NVD",
"id": "CVE-2023-29984"
}
]
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother \u00a0debut\u00a0 Multiple printers and MFPs implementing web servers \u00a0(MFP)\u00a0 In \u00a0NULL\u00a0 Pointer reference vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2023-002270"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202306-2193"
}
],
"trust": 0.6
}
}
VAR-202002-0517
Vulnerability from variot - Updated: 2024-08-14 13:48Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability which could allow remote attackers to obtain sensitive information. Brother MFC-9970CDW A vulnerability exists in the device firmware regarding improper restrictions on rendered user interface layers or frames.Information may be obtained. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. No detailed vulnerability details are currently available. The Brother MFC-9970CDW printer is prone to an unspecified clickjacking vulnerability. Other attacks are also possible. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
=========================================
Brother MFC-9970CDW Firmware 0D
Date: Jan. 13, 2013
URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html
=========================================
Keywords
=========================================
XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit, Zero Day, Brother MFC-9970 CDW
CVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673, CVE-2013-2674, CVE-2013-2675, CVE-2013-2676
=========================================
Summary
=========================================
A Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in January 2013. This document will introduce and discuss the vulnerability and provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware L Version 1.10 Released on July 9, 2012, and prior versions.
=========================================
Overview
=========================================
Brother Industries, Ltd. is a multinational electronics and electrical equipment company headquartered in Nagoya, Japan. Its products include printers, multifunction printers, sewing machines, large machine tools, label printers, typewriters, fax machines, and other computer-related electronics. Brother distributes its products both under its own name and under OEM agreements with other companies. It produces high-impact color output at impressive print and copy speeds of up to 30ppm and offers flexible connectivity with wireless, Ethernet and USB interfaces. It features a 5" Color Touch Screen display for easy navigation and menu selection. Also, this flagship model offers automatic duplex print/copy/scan/fax and optional high yield toner cartridges to help lower your operating costs \x96 making this all-in-one a smart choice for a business or workgroup.
=========================================
The Bug
=========================================
Reflected Cross Site Scripting, CWE-79
=========================================
Vulnerable Parameters = id , val, kind + Query String
Signature = ">alert(1)
=========================================
Version Identification
=========================================
Brother MFC-9970CDW - Version Identification - Firmware \x93L\x94 Version 1.10
Brother MFC-9970CDW - Version Identification - Firmware \x93G\x94
=========================================
PoC
=========================================
PoC URL
http://my.vulnerable.printer/admin/admin_main.html?id=websettings"> alert(1)
=========================================
CVE Information
=========================================
CVE-2013-2507 is specific to Firmware G.
XSS at:
admin/log_to_net.html id parameter
fax/copy_settings.html kind parameter
CVE-2013-2670 is for the issue that is present in both the Firmware G report and Firmware L.
XSS at:
admin/admin_main.html name of an arbitrarily assigned URL parameter
CVE-2013-2671 is for the XSS issues that are only present in Firmware L.
CVEs for Firmware L:
Cleartext submission of password CVE-2013-2672
Password field with autocomplete enabled CVE-2013-2673
Cross-domain Referer leakage CVE-2013-2674
Frameable response (Clickjacking) CVE-2013-2675
Private IP addresses disclosed CVE-2013-2676
CVSS 2 Score = 4.5
Timeline
Attempt contact via e-mail in January 2013.
Call the Toll Free Support Line in March 2013.
Callback from Vendor in April 2013.
E-mail sent to Vendor in April 2013.
VENDOR UNRESPONSIVE
Published May 3, 2013
Hoyt LLC Research Public Domain Report
http://xss.cx/
=========================================
END
=========================================
-----BEGIN PGP SIGNATURE----- Version: 10.2.0.2526
wsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx 1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv AIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb 4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8 nSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG VQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg== =Ua1o -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202002-0517",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industries",
"version": "1.10"
},
{
"model": "mfc-9970cdw l",
"scope": "eq",
"trust": 0.6,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw frimware l",
"scope": "eq",
"trust": 0.3,
"vendor": "brother",
"version": "1.10"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"db": "BID",
"id": "59724"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:mfc-9970cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hoyt LLC Research",
"sources": [
{
"db": "BID",
"id": "59724"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-200"
}
],
"trust": 0.9
},
"cve": "CVE-2013-2675",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CVE-2013-2675",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 4.3,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2013-007201",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CNVD-2013-05295",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2013-2675",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 6.5,
"baseSeverity": "Medium",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2013-007201",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "Required",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-2675",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "JVNDB-2013-007201",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2013-05295",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201305-200",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-200"
},
{
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response (Clickjacking) vulnerability which could allow remote attackers to obtain sensitive information. Brother MFC-9970CDW A vulnerability exists in the device firmware regarding improper restrictions on rendered user interface layers or frames.Information may be obtained. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. No detailed vulnerability details are currently available. The Brother MFC-9970CDW printer is prone to an unspecified clickjacking vulnerability. Other attacks are also possible. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=========================================\n\nBrother MFC-9970CDW Firmware 0D\n\nDate: Jan. 13, 2013\n\nURL:\nhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html\n\n=========================================\n\nKeywords\n\n=========================================\n\nXSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit,\nZero Day, Brother MFC-9970 CDW\n\nCVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673,\nCVE-2013-2674, CVE-2013-2675, CVE-2013-2676\n\n=========================================\n\nSummary\n\n=========================================\n\nA Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in\nJanuary 2013. This document will introduce and discuss the vulnerability\nand provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware\nL Version 1.10 Released on July 9, 2012, and prior versions. \n\n=========================================\n\nOverview\n\n=========================================\n\nBrother Industries, Ltd. is a multinational electronics and electrical\nequipment company headquartered in Nagoya, Japan. Its products include\nprinters, multifunction printers, sewing machines, large machine tools,\nlabel printers, typewriters, fax machines, and other computer-related\nelectronics. Brother distributes its products both under its own name and\nunder OEM agreements with other companies. It produces high-impact color output at impressive\nprint and copy speeds of up to 30ppm and offers flexible connectivity with\nwireless, Ethernet and USB interfaces. It features a 5\" Color Touch Screen\ndisplay for easy navigation and menu selection. Also, this flagship model\noffers automatic duplex print/copy/scan/fax and optional high yield toner\ncartridges to help lower your operating costs \\x96 making this all-in-one a\nsmart choice for a business or workgroup. \n\n=========================================\n\nThe Bug\n\n=========================================\n\nReflected Cross Site Scripting, CWE-79\n\n=========================================\n\nVulnerable Parameters = id , val, kind + Query String\n\nSignature = \"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\n\n=========================================\n\nVersion Identification\n\n=========================================\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93L\\x94 Version\n1.10\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93G\\x94\n\n=========================================\n\nPoC\n\n=========================================\n\nPoC URL\n\nhttp://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e\nalert(1)\u003c/script\u003e\n\n=========================================\n\nCVE Information\n\n=========================================\n\nCVE-2013-2507 is specific to Firmware G. \n\nXSS at:\n\n admin/log_to_net.html id parameter\n\n fax/copy_settings.html kind parameter\n\nCVE-2013-2670 is for the issue that is present in both the Firmware G\nreport and Firmware L. \n\nXSS at:\n\n admin/admin_main.html name of an arbitrarily assigned URL parameter\n\nCVE-2013-2671 is for the XSS issues that are only present in Firmware L. \n\nCVEs for Firmware L:\n\nCleartext submission of password CVE-2013-2672\n\nPassword field with autocomplete enabled CVE-2013-2673\n\nCross-domain Referer leakage CVE-2013-2674\n\nFrameable response (Clickjacking) CVE-2013-2675\n\nPrivate IP addresses disclosed CVE-2013-2676\n\nCVSS 2 Score = 4.5\n\nTimeline\n\nAttempt contact via e-mail in January 2013. \n\nCall the Toll Free Support Line in March 2013. \n\nCallback from Vendor in April 2013. \n\nE-mail sent to Vendor in April 2013. \n\nVENDOR UNRESPONSIVE\n\nPublished May 3, 2013\n\nHoyt LLC Research Public Domain\nReport\n\nhttp://xss.cx/\n\n=========================================\n\nEND\n\n=========================================\n\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: 10.2.0.2526\n\nwsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx\n1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv\nAIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb\n4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8\nnSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG\nVQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg==\n=Ua1o\n-----END PGP SIGNATURE-----\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-2675"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"db": "BID",
"id": "59724"
},
{
"db": "PACKETSTORM",
"id": "121553"
}
],
"trust": 2.52
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-2675",
"trust": 3.4
},
{
"db": "BID",
"id": "59724",
"trust": 2.5
},
{
"db": "PACKETSTORM",
"id": "121553",
"trust": 2.5
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007201",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2013-05295",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201305-200",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"db": "BID",
"id": "59724"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-200"
},
{
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"id": "VAR-202002-0517",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05295"
}
],
"trust": 1.21290324
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05295"
}
]
},
"last_update_date": "2024-08-14T13:48:31.184000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "https://global.brother/en"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-1021",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "http://packetstormsecurity.com/files/121553/brother-mfc-9970cdw-firmware-0d-cross-site-scripting.html"
},
{
"trust": 1.6,
"url": "https://www.securityfocus.com/bid/59724"
},
{
"trust": 1.6,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84092"
},
{
"trust": 1.5,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2675"
},
{
"trust": 1.0,
"url": "http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2675"
},
{
"trust": 0.3,
"url": "http://www.brother.com"
},
{
"trust": 0.3,
"url": "http://www.brother-usa.com/mfc/modeldetail/4/mfc9970cdw/overview#.uyoaxzdi1ch"
},
{
"trust": 0.1,
"url": "http://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e"
},
{
"trust": 0.1,
"url": "http://xss.cx/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2507"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2671"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2674"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2670"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2676"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2672"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2673"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"db": "BID",
"id": "59724"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-200"
},
{
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"db": "BID",
"id": "59724"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-200"
},
{
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59724"
},
{
"date": "2020-02-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"date": "2013-05-08T02:27:54",
"db": "PACKETSTORM",
"id": "121553"
},
{
"date": "2013-05-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-200"
},
{
"date": "2020-02-05T18:15:10.250000",
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05295"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59724"
},
{
"date": "2020-02-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007201"
},
{
"date": "2020-05-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-200"
},
{
"date": "2020-02-11T18:34:27.597000",
"db": "NVD",
"id": "CVE-2013-2675"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-200"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW Vulnerability in improperly limiting rendered user interface layers or frames in device firmware",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007201"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-200"
}
],
"trust": 0.6
}
}
VAR-202002-0515
Vulnerability from variot - Updated: 2024-08-14 13:48Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unauthorized access. (DoS) It may be put into a state. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. The Brother MFC-9970 CDW login page uses the auto-complete feature in the password field by default, allowing an attacker with physical access to more easily access user accounts. A remote attacker could exploit this vulnerability to obtain password information. Brother MFC-9970CDW Printer is prone to a security-bypass weakness. An attacker with physical access can exploit this issue to gain unauthorized access to other user's account. Brother MFC-9970CDW 1.10 firmware L is vulnerable; other versions may also be affected. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
=========================================
Brother MFC-9970CDW Firmware 0D
Date: Jan. 13, 2013
URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html
=========================================
Keywords
=========================================
XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit, Zero Day, Brother MFC-9970 CDW
CVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673, CVE-2013-2674, CVE-2013-2675, CVE-2013-2676
=========================================
Summary
=========================================
A Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in January 2013. This document will introduce and discuss the vulnerability and provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware L Version 1.10 Released on July 9, 2012, and prior versions.
=========================================
Overview
=========================================
Brother Industries, Ltd. is a multinational electronics and electrical equipment company headquartered in Nagoya, Japan. Its products include printers, multifunction printers, sewing machines, large machine tools, label printers, typewriters, fax machines, and other computer-related electronics. Brother distributes its products both under its own name and under OEM agreements with other companies. It produces high-impact color output at impressive print and copy speeds of up to 30ppm and offers flexible connectivity with wireless, Ethernet and USB interfaces. It features a 5" Color Touch Screen display for easy navigation and menu selection. Also, this flagship model offers automatic duplex print/copy/scan/fax and optional high yield toner cartridges to help lower your operating costs \x96 making this all-in-one a smart choice for a business or workgroup.
=========================================
The Bug
=========================================
Reflected Cross Site Scripting, CWE-79
=========================================
Vulnerable Parameters = id , val, kind + Query String
Signature = ">alert(1)
=========================================
Version Identification
=========================================
Brother MFC-9970CDW - Version Identification - Firmware \x93L\x94 Version 1.10
Brother MFC-9970CDW - Version Identification - Firmware \x93G\x94
=========================================
PoC
=========================================
PoC URL
http://my.vulnerable.printer/admin/admin_main.html?id=websettings"> alert(1)
=========================================
CVE Information
=========================================
CVE-2013-2507 is specific to Firmware G.
XSS at:
admin/log_to_net.html id parameter
fax/copy_settings.html kind parameter
CVE-2013-2670 is for the issue that is present in both the Firmware G report and Firmware L.
XSS at:
admin/admin_main.html name of an arbitrarily assigned URL parameter
CVE-2013-2671 is for the XSS issues that are only present in Firmware L.
CVEs for Firmware L:
Cleartext submission of password CVE-2013-2672
Password field with autocomplete enabled CVE-2013-2673
Cross-domain Referer leakage CVE-2013-2674
Frameable response (Clickjacking) CVE-2013-2675
Private IP addresses disclosed CVE-2013-2676
CVSS 2 Score = 4.5
Timeline
Attempt contact via e-mail in January 2013.
Call the Toll Free Support Line in March 2013.
Callback from Vendor in April 2013.
E-mail sent to Vendor in April 2013.
VENDOR UNRESPONSIVE
Published May 3, 2013
Hoyt LLC Research Public Domain Report
http://xss.cx/
=========================================
END
=========================================
-----BEGIN PGP SIGNATURE----- Version: 10.2.0.2526
wsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx 1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv AIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb 4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8 nSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG VQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg== =Ua1o -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202002-0515",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw l",
"scope": "eq",
"trust": 0.9,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industries",
"version": "1.10"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"db": "BID",
"id": "59727"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:mfc-9970cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hoyt LLC",
"sources": [
{
"db": "BID",
"id": "59727"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-197"
}
],
"trust": 0.9
},
"cve": "CVE-2013-2673",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 4.6,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 3.9,
"id": "CVE-2013-2673",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Local",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 4.6,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2013-007164",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2013-05293",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 0.9,
"id": "CVE-2013-2673",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Physical",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 6.8,
"baseSeverity": "Medium",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2013-007164",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-2673",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "JVNDB-2013-007164",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2013-05293",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201305-197",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-197"
},
{
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unauthorized access. (DoS) It may be put into a state. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. The Brother MFC-9970 CDW login page uses the auto-complete feature in the password field by default, allowing an attacker with physical access to more easily access user accounts. A remote attacker could exploit this vulnerability to obtain password information. Brother MFC-9970CDW Printer is prone to a security-bypass weakness. \nAn attacker with physical access can exploit this issue to gain unauthorized access to other user\u0027s account. \nBrother MFC-9970CDW 1.10 firmware L is vulnerable; other versions may also be affected. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=========================================\n\nBrother MFC-9970CDW Firmware 0D\n\nDate: Jan. 13, 2013\n\nURL:\nhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html\n\n=========================================\n\nKeywords\n\n=========================================\n\nXSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit,\nZero Day, Brother MFC-9970 CDW\n\nCVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673,\nCVE-2013-2674, CVE-2013-2675, CVE-2013-2676\n\n=========================================\n\nSummary\n\n=========================================\n\nA Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in\nJanuary 2013. This document will introduce and discuss the vulnerability\nand provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware\nL Version 1.10 Released on July 9, 2012, and prior versions. \n\n=========================================\n\nOverview\n\n=========================================\n\nBrother Industries, Ltd. is a multinational electronics and electrical\nequipment company headquartered in Nagoya, Japan. Its products include\nprinters, multifunction printers, sewing machines, large machine tools,\nlabel printers, typewriters, fax machines, and other computer-related\nelectronics. Brother distributes its products both under its own name and\nunder OEM agreements with other companies. It produces high-impact color output at impressive\nprint and copy speeds of up to 30ppm and offers flexible connectivity with\nwireless, Ethernet and USB interfaces. It features a 5\" Color Touch Screen\ndisplay for easy navigation and menu selection. Also, this flagship model\noffers automatic duplex print/copy/scan/fax and optional high yield toner\ncartridges to help lower your operating costs \\x96 making this all-in-one a\nsmart choice for a business or workgroup. \n\n=========================================\n\nThe Bug\n\n=========================================\n\nReflected Cross Site Scripting, CWE-79\n\n=========================================\n\nVulnerable Parameters = id , val, kind + Query String\n\nSignature = \"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\n\n=========================================\n\nVersion Identification\n\n=========================================\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93L\\x94 Version\n1.10\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93G\\x94\n\n=========================================\n\nPoC\n\n=========================================\n\nPoC URL\n\nhttp://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e\nalert(1)\u003c/script\u003e\n\n=========================================\n\nCVE Information\n\n=========================================\n\nCVE-2013-2507 is specific to Firmware G. \n\nXSS at:\n\n admin/log_to_net.html id parameter\n\n fax/copy_settings.html kind parameter\n\nCVE-2013-2670 is for the issue that is present in both the Firmware G\nreport and Firmware L. \n\nXSS at:\n\n admin/admin_main.html name of an arbitrarily assigned URL parameter\n\nCVE-2013-2671 is for the XSS issues that are only present in Firmware L. \n\nCVEs for Firmware L:\n\nCleartext submission of password CVE-2013-2672\n\nPassword field with autocomplete enabled CVE-2013-2673\n\nCross-domain Referer leakage CVE-2013-2674\n\nFrameable response (Clickjacking) CVE-2013-2675\n\nPrivate IP addresses disclosed CVE-2013-2676\n\nCVSS 2 Score = 4.5\n\nTimeline\n\nAttempt contact via e-mail in January 2013. \n\nCall the Toll Free Support Line in March 2013. \n\nCallback from Vendor in April 2013. \n\nE-mail sent to Vendor in April 2013. \n\nVENDOR UNRESPONSIVE\n\nPublished May 3, 2013\n\nHoyt LLC Research Public Domain\nReport\n\nhttp://xss.cx/\n\n=========================================\n\nEND\n\n=========================================\n\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: 10.2.0.2526\n\nwsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx\n1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv\nAIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb\n4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8\nnSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG\nVQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg==\n=Ua1o\n-----END PGP SIGNATURE-----\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-2673"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"db": "BID",
"id": "59727"
},
{
"db": "PACKETSTORM",
"id": "121553"
}
],
"trust": 2.52
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-2673",
"trust": 3.4
},
{
"db": "BID",
"id": "59727",
"trust": 2.5
},
{
"db": "PACKETSTORM",
"id": "121553",
"trust": 2.5
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007164",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2013-05293",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201305-197",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"db": "BID",
"id": "59727"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-197"
},
{
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"id": "VAR-202002-0515",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05293"
}
],
"trust": 1.21290324
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05293"
}
]
},
"last_update_date": "2024-08-14T13:48:30.658000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "MFC-9970CDW",
"trust": 0.8,
"url": "https://www.brother.co.jp/product/printer/laserprinter/mfc9970cdw/index.aspx"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-863",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "http://packetstormsecurity.com/files/121553/brother-mfc-9970cdw-firmware-0d-cross-site-scripting.html"
},
{
"trust": 1.6,
"url": "https://www.securityfocus.com/bid/59727"
},
{
"trust": 1.5,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2673"
},
{
"trust": 1.0,
"url": "http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2673"
},
{
"trust": 0.3,
"url": "http://www.brother.com"
},
{
"trust": 0.3,
"url": "http://www.brother-usa.com/mfc/modeldetail/4/mfc9970cdw/overview#.uyobsuqdyit"
},
{
"trust": 0.1,
"url": "http://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e"
},
{
"trust": 0.1,
"url": "http://xss.cx/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2507"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2671"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2674"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2670"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2676"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2672"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2675"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"db": "BID",
"id": "59727"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-197"
},
{
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"db": "BID",
"id": "59727"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-197"
},
{
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59727"
},
{
"date": "2020-02-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"date": "2013-05-08T02:27:54",
"db": "PACKETSTORM",
"id": "121553"
},
{
"date": "2013-05-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-197"
},
{
"date": "2020-02-03T18:15:10.960000",
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05293"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59727"
},
{
"date": "2020-02-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007164"
},
{
"date": "2020-05-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-197"
},
{
"date": "2020-02-05T21:13:28.697000",
"db": "NVD",
"id": "CVE-2013-2673"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "BID",
"id": "59727"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-197"
}
],
"trust": 0.9
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW firmware L Unauthorized authentication vulnerabilities in devices",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007164"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-197"
}
],
"trust": 0.6
}
}
VAR-202002-0514
Vulnerability from variot - Updated: 2024-08-14 13:48Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords. Brother MFC-9970CDW Device firmware contains a vulnerability in the protection of inadequate credentials.Information may be obtained. Schneider Electric Magelis XBT HMI is a human interface controller. The Schneider Electric Magelis XBT HMI controller has a default password for configuration upload authentication that allows remote attackers to bypass access restrictions with specially crafted configuration data. Brother MFC-9970CDW Printer is prone to a remote information-disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information, such as passwords, that may aid in further attacks. ** ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
=========================================
Brother MFC-9970CDW Firmware 0D
Date: Jan. 13, 2013
URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html
=========================================
Keywords
=========================================
XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit, Zero Day, Brother MFC-9970 CDW
CVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673, CVE-2013-2674, CVE-2013-2675, CVE-2013-2676
=========================================
Summary
=========================================
A Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in January 2013. This document will introduce and discuss the vulnerability and provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware L Version 1.10 Released on July 9, 2012, and prior versions.
=========================================
Overview
=========================================
Brother Industries, Ltd. is a multinational electronics and electrical equipment company headquartered in Nagoya, Japan. Its products include printers, multifunction printers, sewing machines, large machine tools, label printers, typewriters, fax machines, and other computer-related electronics. Brother distributes its products both under its own name and under OEM agreements with other companies.
The MFC-9970cdw Color Laser All-in-One combines print, copy, scan and fax in one powerful device. It produces high-impact color output at impressive print and copy speeds of up to 30ppm and offers flexible connectivity with wireless, Ethernet and USB interfaces. It features a 5" Color Touch Screen display for easy navigation and menu selection. Also, this flagship model offers automatic duplex print/copy/scan/fax and optional high yield toner cartridges to help lower your operating costs \x96 making this all-in-one a smart choice for a business or workgroup.
=========================================
The Bug
=========================================
Reflected Cross Site Scripting, CWE-79
=========================================
Vulnerable Parameters = id , val, kind + Query String
Signature = ">alert(1)
=========================================
Version Identification
=========================================
Brother MFC-9970CDW - Version Identification - Firmware \x93L\x94 Version 1.10
Brother MFC-9970CDW - Version Identification - Firmware \x93G\x94
=========================================
PoC
=========================================
PoC URL
http://my.vulnerable.printer/admin/admin_main.html?id=websettings"> alert(1)
=========================================
CVE Information
=========================================
CVE-2013-2507 is specific to Firmware G.
XSS at:
admin/log_to_net.html id parameter
fax/copy_settings.html kind parameter
CVE-2013-2670 is for the issue that is present in both the Firmware G report and Firmware L.
XSS at:
admin/admin_main.html name of an arbitrarily assigned URL parameter
CVE-2013-2671 is for the XSS issues that are only present in Firmware L.
CVEs for Firmware L:
Cleartext submission of password CVE-2013-2672
Password field with autocomplete enabled CVE-2013-2673
Cross-domain Referer leakage CVE-2013-2674
Frameable response (Clickjacking) CVE-2013-2675
Private IP addresses disclosed CVE-2013-2676
CVSS 2 Score = 4.5
Timeline
Attempt contact via e-mail in January 2013.
Call the Toll Free Support Line in March 2013.
Callback from Vendor in April 2013.
E-mail sent to Vendor in April 2013.
VENDOR UNRESPONSIVE
Published May 3, 2013
Hoyt LLC Research Public Domain Report
http://xss.cx/
=========================================
END
=========================================
-----BEGIN PGP SIGNATURE----- Version: 10.2.0.2526
wsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx 1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv AIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb 4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8 nSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG VQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg== =Ua1o -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202002-0514",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw",
"scope": null,
"trust": 0.8,
"vendor": "brother industries",
"version": null
},
{
"model": "electric magelis xbt hmi controller",
"scope": null,
"trust": 0.6,
"vendor": "schneider",
"version": null
},
{
"model": "mfc-9970cdw l",
"scope": "eq",
"trust": 0.3,
"vendor": "brother",
"version": "1.10"
},
{
"model": "electric magelis xbt hmi controller",
"scope": "eq",
"trust": 0.2,
"vendor": "schneider",
"version": "*"
}
],
"sources": [
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"db": "BID",
"id": "59721"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:mfc-9970cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hoyt LLC Research",
"sources": [
{
"db": "BID",
"id": "59721"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-202"
}
],
"trust": 0.9
},
"cve": "CVE-2013-2672",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2013-2672",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.0,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2013-007166",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CNVD-2013-03176",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "IVD",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "0860eb70-2353-11e6-abef-000c29c66e3d",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.2,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.9 [IVD]"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2013-2672",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2013-007166",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-2672",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "JVNDB-2013-007166",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2013-03176",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201305-202",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d",
"trust": 0.2,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-202"
},
{
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords. Brother MFC-9970CDW Device firmware contains a vulnerability in the protection of inadequate credentials.Information may be obtained. Schneider Electric Magelis XBT HMI is a human interface controller. The Schneider Electric Magelis XBT HMI controller has a default password for configuration upload authentication that allows remote attackers to bypass access restrictions with specially crafted configuration data. Brother MFC-9970CDW Printer is prone to a remote information-disclosure vulnerability. \nSuccessful exploits will allow attackers to obtain sensitive information, such as passwords, that may aid in further attacks. ** ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=========================================\n\nBrother MFC-9970CDW Firmware 0D\n\nDate: Jan. 13, 2013\n\nURL:\nhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html\n\n=========================================\n\nKeywords\n\n=========================================\n\nXSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit,\nZero Day, Brother MFC-9970 CDW\n\nCVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673,\nCVE-2013-2674, CVE-2013-2675, CVE-2013-2676\n\n=========================================\n\nSummary\n\n=========================================\n\nA Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in\nJanuary 2013. This document will introduce and discuss the vulnerability\nand provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware\nL Version 1.10 Released on July 9, 2012, and prior versions. \n\n=========================================\n\nOverview\n\n=========================================\n\nBrother Industries, Ltd. is a multinational electronics and electrical\nequipment company headquartered in Nagoya, Japan. Its products include\nprinters, multifunction printers, sewing machines, large machine tools,\nlabel printers, typewriters, fax machines, and other computer-related\nelectronics. Brother distributes its products both under its own name and\nunder OEM agreements with other companies. \n\n\n\nThe MFC-9970cdw Color Laser All-in-One combines print, copy, scan and fax\nin one powerful device. It produces high-impact color output at impressive\nprint and copy speeds of up to 30ppm and offers flexible connectivity with\nwireless, Ethernet and USB interfaces. It features a 5\" Color Touch Screen\ndisplay for easy navigation and menu selection. Also, this flagship model\noffers automatic duplex print/copy/scan/fax and optional high yield toner\ncartridges to help lower your operating costs \\x96 making this all-in-one a\nsmart choice for a business or workgroup. \n\n=========================================\n\nThe Bug\n\n=========================================\n\nReflected Cross Site Scripting, CWE-79\n\n=========================================\n\nVulnerable Parameters = id , val, kind + Query String\n\nSignature = \"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\n\n=========================================\n\nVersion Identification\n\n=========================================\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93L\\x94 Version\n1.10\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93G\\x94\n\n=========================================\n\nPoC\n\n=========================================\n\nPoC URL\n\nhttp://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e\nalert(1)\u003c/script\u003e\n\n=========================================\n\nCVE Information\n\n=========================================\n\nCVE-2013-2507 is specific to Firmware G. \n\nXSS at:\n\n admin/log_to_net.html id parameter\n\n fax/copy_settings.html kind parameter\n\nCVE-2013-2670 is for the issue that is present in both the Firmware G\nreport and Firmware L. \n\nXSS at:\n\n admin/admin_main.html name of an arbitrarily assigned URL parameter\n\nCVE-2013-2671 is for the XSS issues that are only present in Firmware L. \n\nCVEs for Firmware L:\n\nCleartext submission of password CVE-2013-2672\n\nPassword field with autocomplete enabled CVE-2013-2673\n\nCross-domain Referer leakage CVE-2013-2674\n\nFrameable response (Clickjacking) CVE-2013-2675\n\nPrivate IP addresses disclosed CVE-2013-2676\n\nCVSS 2 Score = 4.5\n\nTimeline\n\nAttempt contact via e-mail in January 2013. \n\nCall the Toll Free Support Line in March 2013. \n\nCallback from Vendor in April 2013. \n\nE-mail sent to Vendor in April 2013. \n\nVENDOR UNRESPONSIVE\n\nPublished May 3, 2013\n\nHoyt LLC Research Public Domain\nReport\n\nhttp://xss.cx/\n\n=========================================\n\nEND\n\n=========================================\n\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: 10.2.0.2526\n\nwsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx\n1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv\nAIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb\n4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8\nnSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG\nVQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg==\n=Ua1o\n-----END PGP SIGNATURE-----\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-2672"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"db": "BID",
"id": "59721"
},
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "PACKETSTORM",
"id": "121553"
}
],
"trust": 2.7
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-2672",
"trust": 3.6
},
{
"db": "PACKETSTORM",
"id": "121553",
"trust": 2.5
},
{
"db": "CNVD",
"id": "CNVD-2013-03176",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201305-202",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007166",
"trust": 0.8
},
{
"db": "BID",
"id": "58953",
"trust": 0.6
},
{
"db": "BID",
"id": "59721",
"trust": 0.3
},
{
"db": "IVD",
"id": "0860EB70-2353-11E6-ABEF-000C29C66E3D",
"trust": 0.2
}
],
"sources": [
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"db": "BID",
"id": "59721"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-202"
},
{
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"id": "VAR-202002-0514",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
}
],
"trust": 1.60645162
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.8
}
],
"sources": [
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
}
]
},
"last_update_date": "2024-08-14T13:48:30.579000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "https://global.brother/en"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-522",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "http://packetstormsecurity.com/files/121553/brother-mfc-9970cdw-firmware-0d-cross-site-scripting.html"
},
{
"trust": 1.6,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84094"
},
{
"trust": 1.5,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2672"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2672"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/bid/58953"
},
{
"trust": 0.4,
"url": "http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html"
},
{
"trust": 0.3,
"url": "http://www.brother.com"
},
{
"trust": 0.3,
"url": "http://www.brother-usa.com/mfc/modeldetail/4/mfc9970cdw/overview#.uyobsuqdyit"
},
{
"trust": 0.1,
"url": "http://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e"
},
{
"trust": 0.1,
"url": "http://xss.cx/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2507"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2671"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2674"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2670"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2676"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2675"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2673"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"db": "BID",
"id": "59721"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-202"
},
{
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"db": "BID",
"id": "59721"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-202"
},
{
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-04-16T00:00:00",
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"date": "2013-04-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59721"
},
{
"date": "2020-02-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"date": "2013-05-08T02:27:54",
"db": "PACKETSTORM",
"id": "121553"
},
{
"date": "2013-05-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-202"
},
{
"date": "2020-02-03T17:15:12.033000",
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-28T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-03176"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59721"
},
{
"date": "2020-02-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007166"
},
{
"date": "2020-05-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-202"
},
{
"date": "2020-02-05T20:49:11.063000",
"db": "NVD",
"id": "CVE-2013-2672"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-202"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Schneider Electric Magelis XBT HMI Controller Remote Security Bypass Vulnerability",
"sources": [
{
"db": "IVD",
"id": "0860eb70-2353-11e6-abef-000c29c66e3d"
},
{
"db": "CNVD",
"id": "CNVD-2013-03176"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-202"
}
],
"trust": 0.6
}
}
VAR-202002-0518
Vulnerability from variot - Updated: 2024-08-14 13:48Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP addresses and other sensitive information. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. Brother MFC-9970CDW Printer is prone to a remote information-disclosure vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
=========================================
Brother MFC-9970CDW Firmware 0D
Date: Jan. 13, 2013
URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html
=========================================
Keywords
=========================================
XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit, Zero Day, Brother MFC-9970 CDW
CVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673, CVE-2013-2674, CVE-2013-2675, CVE-2013-2676
=========================================
Summary
=========================================
A Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in January 2013. This document will introduce and discuss the vulnerability and provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware L Version 1.10 Released on July 9, 2012, and prior versions.
=========================================
Overview
=========================================
Brother Industries, Ltd. is a multinational electronics and electrical equipment company headquartered in Nagoya, Japan. Its products include printers, multifunction printers, sewing machines, large machine tools, label printers, typewriters, fax machines, and other computer-related electronics. Brother distributes its products both under its own name and under OEM agreements with other companies. It produces high-impact color output at impressive print and copy speeds of up to 30ppm and offers flexible connectivity with wireless, Ethernet and USB interfaces. It features a 5" Color Touch Screen display for easy navigation and menu selection. Also, this flagship model offers automatic duplex print/copy/scan/fax and optional high yield toner cartridges to help lower your operating costs \x96 making this all-in-one a smart choice for a business or workgroup.
=========================================
The Bug
=========================================
Reflected Cross Site Scripting, CWE-79
=========================================
Vulnerable Parameters = id , val, kind + Query String
Signature = ">alert(1)
=========================================
Version Identification
=========================================
Brother MFC-9970CDW - Version Identification - Firmware \x93L\x94 Version 1.10
Brother MFC-9970CDW - Version Identification - Firmware \x93G\x94
=========================================
PoC
=========================================
PoC URL
http://my.vulnerable.printer/admin/admin_main.html?id=websettings"> alert(1)
=========================================
CVE Information
=========================================
CVE-2013-2507 is specific to Firmware G.
XSS at:
admin/log_to_net.html id parameter
fax/copy_settings.html kind parameter
CVE-2013-2670 is for the issue that is present in both the Firmware G report and Firmware L.
XSS at:
admin/admin_main.html name of an arbitrarily assigned URL parameter
CVE-2013-2671 is for the XSS issues that are only present in Firmware L.
CVEs for Firmware L:
Cleartext submission of password CVE-2013-2672
Password field with autocomplete enabled CVE-2013-2673
Cross-domain Referer leakage CVE-2013-2674
Frameable response (Clickjacking) CVE-2013-2675
Private IP addresses disclosed CVE-2013-2676
CVSS 2 Score = 4.5
Timeline
Attempt contact via e-mail in January 2013.
Call the Toll Free Support Line in March 2013.
Callback from Vendor in April 2013.
E-mail sent to Vendor in April 2013.
VENDOR UNRESPONSIVE
Published May 3, 2013
Hoyt LLC Research Public Domain Report
http://xss.cx/
=========================================
END
=========================================
-----BEGIN PGP SIGNATURE----- Version: 10.2.0.2526
wsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx 1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv AIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb 4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8 nSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG VQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg== =Ua1o -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202002-0518",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw l",
"scope": "eq",
"trust": 0.9,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industries",
"version": "1.10"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"db": "BID",
"id": "59726"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:mfc-9970cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hoyt LLC Research",
"sources": [
{
"db": "BID",
"id": "59726"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
}
],
"trust": 0.9
},
"cve": "CVE-2013-2676",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2013-2676",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.1,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.0,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2013-007222",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2013-05296",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2013-2676",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2013-007222",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-2676",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "JVNDB-2013-007222",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2013-05296",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201305-198",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2013-2676",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"db": "VULMON",
"id": "CVE-2013-2676"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
},
{
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view private IP addresses and other sensitive information. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. Brother MFC-9970CDW Printer is prone to a remote information-disclosure vulnerability. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=========================================\n\nBrother MFC-9970CDW Firmware 0D\n\nDate: Jan. 13, 2013\n\nURL:\nhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html\n\n=========================================\n\nKeywords\n\n=========================================\n\nXSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit,\nZero Day, Brother MFC-9970 CDW\n\nCVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673,\nCVE-2013-2674, CVE-2013-2675, CVE-2013-2676\n\n=========================================\n\nSummary\n\n=========================================\n\nA Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in\nJanuary 2013. This document will introduce and discuss the vulnerability\nand provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware\nL Version 1.10 Released on July 9, 2012, and prior versions. \n\n=========================================\n\nOverview\n\n=========================================\n\nBrother Industries, Ltd. is a multinational electronics and electrical\nequipment company headquartered in Nagoya, Japan. Its products include\nprinters, multifunction printers, sewing machines, large machine tools,\nlabel printers, typewriters, fax machines, and other computer-related\nelectronics. Brother distributes its products both under its own name and\nunder OEM agreements with other companies. It produces high-impact color output at impressive\nprint and copy speeds of up to 30ppm and offers flexible connectivity with\nwireless, Ethernet and USB interfaces. It features a 5\" Color Touch Screen\ndisplay for easy navigation and menu selection. Also, this flagship model\noffers automatic duplex print/copy/scan/fax and optional high yield toner\ncartridges to help lower your operating costs \\x96 making this all-in-one a\nsmart choice for a business or workgroup. \n\n=========================================\n\nThe Bug\n\n=========================================\n\nReflected Cross Site Scripting, CWE-79\n\n=========================================\n\nVulnerable Parameters = id , val, kind + Query String\n\nSignature = \"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\n\n=========================================\n\nVersion Identification\n\n=========================================\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93L\\x94 Version\n1.10\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93G\\x94\n\n=========================================\n\nPoC\n\n=========================================\n\nPoC URL\n\nhttp://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e\nalert(1)\u003c/script\u003e\n\n=========================================\n\nCVE Information\n\n=========================================\n\nCVE-2013-2507 is specific to Firmware G. \n\nXSS at:\n\n admin/log_to_net.html id parameter\n\n fax/copy_settings.html kind parameter\n\nCVE-2013-2670 is for the issue that is present in both the Firmware G\nreport and Firmware L. \n\nXSS at:\n\n admin/admin_main.html name of an arbitrarily assigned URL parameter\n\nCVE-2013-2671 is for the XSS issues that are only present in Firmware L. \n\nCVEs for Firmware L:\n\nCleartext submission of password CVE-2013-2672\n\nPassword field with autocomplete enabled CVE-2013-2673\n\nCross-domain Referer leakage CVE-2013-2674\n\nFrameable response (Clickjacking) CVE-2013-2675\n\nPrivate IP addresses disclosed CVE-2013-2676\n\nCVSS 2 Score = 4.5\n\nTimeline\n\nAttempt contact via e-mail in January 2013. \n\nCall the Toll Free Support Line in March 2013. \n\nCallback from Vendor in April 2013. \n\nE-mail sent to Vendor in April 2013. \n\nVENDOR UNRESPONSIVE\n\nPublished May 3, 2013\n\nHoyt LLC Research Public Domain\nReport\n\nhttp://xss.cx/\n\n=========================================\n\nEND\n\n=========================================\n\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: 10.2.0.2526\n\nwsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx\n1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv\nAIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb\n4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8\nnSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG\nVQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg==\n=Ua1o\n-----END PGP SIGNATURE-----\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-2676"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"db": "BID",
"id": "59726"
},
{
"db": "VULMON",
"id": "CVE-2013-2676"
},
{
"db": "PACKETSTORM",
"id": "121553"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-2676",
"trust": 3.5
},
{
"db": "BID",
"id": "59726",
"trust": 3.4
},
{
"db": "PACKETSTORM",
"id": "121553",
"trust": 1.8
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007222",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2013-05296",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201305-198",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2013-2676",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"db": "VULMON",
"id": "CVE-2013-2676"
},
{
"db": "BID",
"id": "59726"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
},
{
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"id": "VAR-202002-0518",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
}
],
"trust": 1.21290324
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
}
]
},
"last_update_date": "2024-08-14T13:48:30.494000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "https://global.brother/en"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.6,
"url": "https://www.securityfocus.com/bid/59726"
},
{
"trust": 1.7,
"url": "http://packetstormsecurity.com/files/121553/brother-mfc-9970cdw-firmware-0d-cross-site-scripting.html"
},
{
"trust": 1.7,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84090"
},
{
"trust": 1.5,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2676"
},
{
"trust": 1.0,
"url": "http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2676"
},
{
"trust": 0.3,
"url": "http://www.brother.com"
},
{
"trust": 0.3,
"url": "http://www.brother-usa.com/mfc/modeldetail/4/mfc9970cdw/overview#.uyobsuqdyit"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/200.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "http://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e"
},
{
"trust": 0.1,
"url": "http://xss.cx/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2507"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2671"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2674"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2670"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2672"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2675"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2673"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"db": "VULMON",
"id": "CVE-2013-2676"
},
{
"db": "BID",
"id": "59726"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
},
{
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"db": "VULMON",
"id": "CVE-2013-2676"
},
{
"db": "BID",
"id": "59726"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
},
{
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"date": "2020-02-04T00:00:00",
"db": "VULMON",
"id": "CVE-2013-2676"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59726"
},
{
"date": "2020-02-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"date": "2013-05-08T02:27:54",
"db": "PACKETSTORM",
"id": "121553"
},
{
"date": "2013-05-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-198"
},
{
"date": "2020-02-04T15:15:11.287000",
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"date": "2020-02-12T00:00:00",
"db": "VULMON",
"id": "CVE-2013-2676"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59726"
},
{
"date": "2020-02-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007222"
},
{
"date": "2020-05-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-198"
},
{
"date": "2020-02-12T14:59:59.060000",
"db": "NVD",
"id": "CVE-2013-2676"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW Information Disclosure Vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05296"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
}
],
"trust": 1.2
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-198"
}
],
"trust": 0.6
}
}
VAR-202002-0516
Vulnerability from variot - Updated: 2024-08-14 13:48Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive information from referrer logs due to inadequate handling of HTTP referrer headers. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. A security vulnerability exists in the Brother MFC-9970CDW that allows remote attackers to exploit vulnerabilities to gain access to cross-domain referers. No detailed vulnerability details are currently available. Brother MFC-9970CDW Printer is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information. This may aid in further attacks. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
=========================================
Brother MFC-9970CDW Firmware 0D
Date: Jan. 13, 2013
URL: http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html
=========================================
Keywords
=========================================
XSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit, Zero Day, Brother MFC-9970 CDW
CVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673, CVE-2013-2674, CVE-2013-2675, CVE-2013-2676
=========================================
Summary
=========================================
A Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in January 2013. This document will introduce and discuss the vulnerability and provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware L Version 1.10 Released on July 9, 2012, and prior versions.
=========================================
Overview
=========================================
Brother Industries, Ltd. is a multinational electronics and electrical equipment company headquartered in Nagoya, Japan. Its products include printers, multifunction printers, sewing machines, large machine tools, label printers, typewriters, fax machines, and other computer-related electronics. Brother distributes its products both under its own name and under OEM agreements with other companies. It produces high-impact color output at impressive print and copy speeds of up to 30ppm and offers flexible connectivity with wireless, Ethernet and USB interfaces. It features a 5" Color Touch Screen display for easy navigation and menu selection. Also, this flagship model offers automatic duplex print/copy/scan/fax and optional high yield toner cartridges to help lower your operating costs \x96 making this all-in-one a smart choice for a business or workgroup.
=========================================
The Bug
=========================================
Reflected Cross Site Scripting, CWE-79
=========================================
Vulnerable Parameters = id , val, kind + Query String
Signature = ">alert(1)
=========================================
Version Identification
=========================================
Brother MFC-9970CDW - Version Identification - Firmware \x93L\x94 Version 1.10
Brother MFC-9970CDW - Version Identification - Firmware \x93G\x94
=========================================
PoC
=========================================
PoC URL
http://my.vulnerable.printer/admin/admin_main.html?id=websettings"> alert(1)
=========================================
CVE Information
=========================================
CVE-2013-2507 is specific to Firmware G.
XSS at:
admin/log_to_net.html id parameter
fax/copy_settings.html kind parameter
CVE-2013-2670 is for the issue that is present in both the Firmware G report and Firmware L.
XSS at:
admin/admin_main.html name of an arbitrarily assigned URL parameter
CVE-2013-2671 is for the XSS issues that are only present in Firmware L.
CVEs for Firmware L:
Cleartext submission of password CVE-2013-2672
Password field with autocomplete enabled CVE-2013-2673
Cross-domain Referer leakage CVE-2013-2674
Frameable response (Clickjacking) CVE-2013-2675
Private IP addresses disclosed CVE-2013-2676
CVSS 2 Score = 4.5
Timeline
Attempt contact via e-mail in January 2013.
Call the Toll Free Support Line in March 2013.
Callback from Vendor in April 2013.
E-mail sent to Vendor in April 2013.
VENDOR UNRESPONSIVE
Published May 3, 2013
Hoyt LLC Research Public Domain Report
http://xss.cx/
=========================================
END
=========================================
-----BEGIN PGP SIGNATURE----- Version: 10.2.0.2526
wsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx 1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv AIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb 4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8 nSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG VQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg== =Ua1o -----END PGP SIGNATURE-----
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202002-0516",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 1.0,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw l",
"scope": "eq",
"trust": 0.9,
"vendor": "brother",
"version": "1.10"
},
{
"model": "mfc-9970cdw",
"scope": "eq",
"trust": 0.8,
"vendor": "brother industries",
"version": "1.10"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"db": "BID",
"id": "59725"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:brother:mfc-9970cdw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Hoyt LLC",
"sources": [
{
"db": "BID",
"id": "59725"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-199"
}
],
"trust": 0.9
},
"cve": "CVE-2013-2674",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2013-2674",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.0,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2013-007165",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2013-05294",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2013-2674",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2013-007165",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-2674",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "JVNDB-2013-007165",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2013-05294",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201305-199",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-199"
},
{
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive information from referrer logs due to inadequate handling of HTTP referrer headers. The Brother MFC-9970CDW is a color laser printer device that supports wireless network printing. A security vulnerability exists in the Brother MFC-9970CDW that allows remote attackers to exploit vulnerabilities to gain access to cross-domain referers. No detailed vulnerability details are currently available. Brother MFC-9970CDW Printer is prone to an information-disclosure vulnerability. \nAttackers can exploit this issue to obtain sensitive information. This may aid in further attacks. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA256\n\n=========================================\n\nBrother MFC-9970CDW Firmware 0D\n\nDate: Jan. 13, 2013\n\nURL:\nhttp://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html\n\n=========================================\n\nKeywords\n\n=========================================\n\nXSS, Cross Site Scripting, CWE-79, CAPEC-86, Javascript Injection, Exploit,\nZero Day, Brother MFC-9970 CDW\n\nCVE-2013-2507, CVE-2013-2670, CVE-2013-2671, CVE-2013-2672, CVE-2013-2673,\nCVE-2013-2674, CVE-2013-2675, CVE-2013-2676\n\n=========================================\n\nSummary\n\n=========================================\n\nA Reflected XSS Bug in the Brother MFC-9970CDW Printer was discovered in\nJanuary 2013. This document will introduce and discuss the vulnerability\nand provide Proof-of-Concept (PoC) Zero Day (0D) code examples for Firmware\nL Version 1.10 Released on July 9, 2012, and prior versions. \n\n=========================================\n\nOverview\n\n=========================================\n\nBrother Industries, Ltd. is a multinational electronics and electrical\nequipment company headquartered in Nagoya, Japan. Its products include\nprinters, multifunction printers, sewing machines, large machine tools,\nlabel printers, typewriters, fax machines, and other computer-related\nelectronics. Brother distributes its products both under its own name and\nunder OEM agreements with other companies. It produces high-impact color output at impressive\nprint and copy speeds of up to 30ppm and offers flexible connectivity with\nwireless, Ethernet and USB interfaces. It features a 5\" Color Touch Screen\ndisplay for easy navigation and menu selection. Also, this flagship model\noffers automatic duplex print/copy/scan/fax and optional high yield toner\ncartridges to help lower your operating costs \\x96 making this all-in-one a\nsmart choice for a business or workgroup. \n\n=========================================\n\nThe Bug\n\n=========================================\n\nReflected Cross Site Scripting, CWE-79\n\n=========================================\n\nVulnerable Parameters = id , val, kind + Query String\n\nSignature = \"\u003e\u003cscript\u003ealert(1)\u003c/script\u003e\n\n=========================================\n\nVersion Identification\n\n=========================================\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93L\\x94 Version\n1.10\n\nBrother MFC-9970CDW - Version Identification - Firmware \\x93G\\x94\n\n=========================================\n\nPoC\n\n=========================================\n\nPoC URL\n\nhttp://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e\nalert(1)\u003c/script\u003e\n\n=========================================\n\nCVE Information\n\n=========================================\n\nCVE-2013-2507 is specific to Firmware G. \n\nXSS at:\n\n admin/log_to_net.html id parameter\n\n fax/copy_settings.html kind parameter\n\nCVE-2013-2670 is for the issue that is present in both the Firmware G\nreport and Firmware L. \n\nXSS at:\n\n admin/admin_main.html name of an arbitrarily assigned URL parameter\n\nCVE-2013-2671 is for the XSS issues that are only present in Firmware L. \n\nCVEs for Firmware L:\n\nCleartext submission of password CVE-2013-2672\n\nPassword field with autocomplete enabled CVE-2013-2673\n\nCross-domain Referer leakage CVE-2013-2674\n\nFrameable response (Clickjacking) CVE-2013-2675\n\nPrivate IP addresses disclosed CVE-2013-2676\n\nCVSS 2 Score = 4.5\n\nTimeline\n\nAttempt contact via e-mail in January 2013. \n\nCall the Toll Free Support Line in March 2013. \n\nCallback from Vendor in April 2013. \n\nE-mail sent to Vendor in April 2013. \n\nVENDOR UNRESPONSIVE\n\nPublished May 3, 2013\n\nHoyt LLC Research Public Domain\nReport\n\nhttp://xss.cx/\n\n=========================================\n\nEND\n\n=========================================\n\n\n\n-----BEGIN PGP SIGNATURE-----\nVersion: 10.2.0.2526\n\nwsBVAwUBUYkKz3z+WcLIygj0AQiVegf/VFskxkdQkqUcqzKXHbTvnHLkkTA8fSgx\n1orNQQwxahmpX2f5Jce4zuUz2g+35McwWCKR4kMnOio/9FnWl/w+zqiwmzFqfuHv\nAIQAD0XXP+vKY/vSF0Bjtg9bUVlkNC4ilmyYVwWS9ycM0HOff3nwXxaZmpkr1Ibb\n4Bn4ZeILFYaZYYfj3kM4JSsIuI+gisGmTDg6jMYfZhFDIps5nXeq2vDm34E7Sgx8\nnSEOiS9FIq7YSh+ZIWCJE3Olcsx0DUiZuZXVIR4pT8mubB0f6Fx6wOVNQyiT5qNG\nVQNG1QARkNQFxxuSZD11NtO8mszE+sC8ZBP4VfRjkvJ3c8DecyB5Mg==\n=Ua1o\n-----END PGP SIGNATURE-----\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-2674"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"db": "BID",
"id": "59725"
},
{
"db": "PACKETSTORM",
"id": "121553"
}
],
"trust": 2.52
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2013-2674",
"trust": 3.4
},
{
"db": "BID",
"id": "59725",
"trust": 2.5
},
{
"db": "PACKETSTORM",
"id": "121553",
"trust": 2.5
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007165",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2013-05294",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201305-199",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"db": "BID",
"id": "59725"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-199"
},
{
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"id": "VAR-202002-0516",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05294"
}
],
"trust": 1.21290324
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05294"
}
]
},
"last_update_date": "2024-08-14T13:48:30.457000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "MFC-9970CDW",
"trust": 0.8,
"url": "https://www.brother.co.jp/product/printer/laserprinter/mfc9970cdw/index.aspx"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "http://packetstormsecurity.com/files/121553/brother-mfc-9970cdw-firmware-0d-cross-site-scripting.html"
},
{
"trust": 1.6,
"url": "https://www.securityfocus.com/bid/59725"
},
{
"trust": 1.6,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/84091"
},
{
"trust": 1.5,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2674"
},
{
"trust": 1.0,
"url": "http://www.cloudscan.me/2013/05/xss-javascript-injection-brother-mfc.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-2674"
},
{
"trust": 0.3,
"url": "http://www.brother.com"
},
{
"trust": 0.3,
"url": "http://www.brother-usa.com/mfc/modeldetail/4/mfc9970cdw/overview#.uyoaxzdi1ch"
},
{
"trust": 0.1,
"url": "http://my.vulnerable.printer/admin/admin_main.html?id=websettings\"\u003e\u003cscript\u003e"
},
{
"trust": 0.1,
"url": "http://xss.cx/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2507"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2671"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2670"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2676"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2672"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2675"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-2673"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"db": "BID",
"id": "59725"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-199"
},
{
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"db": "BID",
"id": "59725"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"db": "PACKETSTORM",
"id": "121553"
},
{
"db": "CNNVD",
"id": "CNNVD-201305-199"
},
{
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59725"
},
{
"date": "2020-02-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"date": "2013-05-08T02:27:54",
"db": "PACKETSTORM",
"id": "121553"
},
{
"date": "2013-05-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-199"
},
{
"date": "2020-02-03T18:15:11.023000",
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2013-05-14T00:00:00",
"db": "CNVD",
"id": "CNVD-2013-05294"
},
{
"date": "2013-05-06T00:00:00",
"db": "BID",
"id": "59725"
},
{
"date": "2020-02-18T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-007165"
},
{
"date": "2020-05-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201305-199"
},
{
"date": "2020-02-05T20:32:11.250000",
"db": "NVD",
"id": "CVE-2013-2674"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-199"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Brother MFC-9970CDW firmware L Information leakage vulnerabilities in devices",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-007165"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201305-199"
}
],
"trust": 0.6
}
}