CVE-2024-51983highCWE-1286

CVE-2024-51983: high-severity vulnerability in Brother Industries, Ltd ADS-1250W

Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.

Published 25 Jun 2025 · Updated 07 Apr 2026

Follow this CVE + Monitor bizhub + Monitor DCP-7090DW

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

26Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 12%

In short

An attacker can crash multifunction printers and copiers from several manufacturers by sending a specially crafted request to their web service, causing repeated reboots and service interruptions without needing a password.

Technical detail

An unauthenticated attacker with network access to TCP port 80 can send a malformed WS-Scan SOAP request with an unexpected JobToken value, triggering a device crash and reboot cycle. This denial of service condition affects web services on multifunction devices from Brother, FUJIFILM, Ricoh, Toshiba Tec, and Konica Minolta and can be repeated to maintain service unavailability.

Summary generated and translated by AI from the official description.

An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Related CVEs — Brother Industries, Ltd ADS-1250W

In the same product, most dangerous first.

CVE-2024-51978CRITICALAuthentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.EPSS 15.8%CVE-2024-51984MEDIUMAuthenticated disclosure of external service passwords via pass-back attack affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.EPSS 1.0%CVE-2025-8452MEDIUMUnauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc.EPSS 0.3%

References

https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf https://github.com/sfewer-r7/BrotherVulnerabilities https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007 https://www.toshibatec.com/information/20250625_02.html