CVE-2024-51978criticalobserved exploitationCWE-1391

CVE-2024-51978: critical vulnerability in Brother Industries, Ltd ADS-1250W

Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.

Published 25 Jun 2025 · Updated 30 Mar 2026

Follow this CVE + Monitor bizhub + Monitor DCP-7090DW

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

90Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actcvss 9.8epss 16%

from disclosure to weaponsame day

Published on NVDJun 25

1st PoCMay 22

metasploitJun 25

VulnCheck+42d

In short

An attacker who knows a printer's serial number can generate the default admin password without needing to authenticate, gaining full control of the device. This is critical because serial numbers are often publicly visible or easily discovered.

Technical detail

CWE-1391 vulnerability allows unauthenticated attackers to derive default administrator credentials from a device's serial number across affected Brother, Toshiba Tec, and Konica Minolta models. Attack vectors include HTTP/HTTPS, IPP, PJL, and SNMP protocols; serial number discovery can be chained with CVE-2024-51977. Successful exploitation grants unauthorized administrative access without authentication.

Summary generated and translated by AI from the official description.

An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

public PoCs found — 4

cve_referencegithub.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51978.yamlunverified cve_referencegithub.com/rapid7/metasploit-framework/pull/20349unverified cve_referencegithub.com/sfewer-r7/BrotherVulnerabilitiesunverified vulncheckvulncheck.com/xdb/20e9ac05cdf5unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Related CVEs — Brother Industries, Ltd ADS-1250W

In the same product, most dangerous first.

CVE-2024-51983HIGHUnauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.EPSS 11.8%CVE-2024-51984MEDIUMAuthenticated disclosure of external service passwords via pass-back attack affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.EPSS 1.0%CVE-2025-8452MEDIUMUnauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc.EPSS 0.3%

References

https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51978.yaml https://github.com/rapid7/metasploit-framework/pull/20349 https://github.com/sfewer-r7/BrotherVulnerabilities https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000 https://www.bleepingcomputer.com/news/security/brother-printer-bug-in-689-models-exposes-default-admin-passwords/https://www.darkreading.com/endpoint-security/millions-brother-printers-critical-unpatchable-bug https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed https://www.securityweek.com/new-vulnerabilities-expose-millions-of-brother-printers-to-hacking/