CVE-2024-51982highCWE-1286

CVE-2024-51982: falha de alta gravidade em Brother Industries, Ltd ADS-2400N

Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh.

Publicada em 25 jun 2025 · Atualizada em 02 abr 2026

Seguir esta CVE + Monitorar DCP-7090DW + Monitorar DCP-7190DN

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

26Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 11%

Em resumo

Um atacante pode derrubar impressoras de marcas como Brother, FUJIFILM e Ricoh ao enviar um comando malformado pela porta 9100, forçando reinicializações constantes. A impressora fica inutilizável enquanto o ataque continua.

Detalhe técnico

Um atacante não autenticado com acesso à rede na porta TCP 9100 pode enviar um comando PJL malformado com a variável FORMLINES definida como um valor não numérico, causando falha e ciclos de reinicialização. A vulnerabilidade afeta múltiplos modelos de impressoras e permite negação de serviço repetida sem autenticação.

Resumo gerado e traduzido por IA a partir da descrição oficial.

An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language (PJL) command that will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. A malformed PJL variable FORMLINES is set to a non number value causing the target to crash.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Produtos afetados

CVEs relacionadas — Brother Industries, Ltd ADS-2400N

No mesmo produto, das mais perigosas para as menos.

CVE-2024-51983HIGHUnauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.EPSS 11.8%CVE-2024-51979HIGHAuthenticated stack based buffer overflow affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Konica Minolta, Inc.EPSS 1.1%CVE-2024-51980MEDIUMUnauthenticated Server Side Request Forgery (SSRF) via WS-Addressing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.EPSS 1.0%CVE-2024-51984MEDIUMAuthenticated disclosure of external service passwords via pass-back attack affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.EPSS 1.0%CVE-2024-51981MEDIUMUnauthenticated Server Side Request Forgery (SSRF) via WS-Eventing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Toshiba Tec, and Konica Minolta, Inc.EPSS 1.0%

Referências

https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf https://github.com/sfewer-r7/BrotherVulnerabilities https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007