CVE Intelligence
Skip to main content
MEDIUMpublic exploit

CVE-2024-51977

CVE-2024-51977 — Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Kon

An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mnt_info.csv can be accessed via a GET request and no authentication is required. The returned result is a comma separated value (CSV) table of information. The leaked information includes the device’s model, firmware version, IP address, and serial number.

Published Updated Sources: cvelistV5, rapid7

Triage

Is it exploited, how likely is exploitation, what does it touch, and how severe do the scoring sources call it.

Exploitation

Exploit code

public exploit, none observed

EPSS

73%

chance of exploitation in 30 days

Affects

brother industries

447 products listed

CVSS base

5.3

MEDIUM

CISA SSVC assessment

Three decision points CISA publishes for the CVEs it assesses · SSVC 2.0.3. A stakeholder decision, not a severity score.

CISA

Exploitation

PoC

none · proof-of-concept · active

Automatable

Yes

can an attacker script all four kill-chain steps

Technical impact

Partial

partial · total control of the vulnerable component

Affected scope

The catalog records vendors and products as separate lists, not pairs, so which product belongs to which vendor is not something this page can say.

Products (447)

hl l8260cdndcp j928n w bdcp j987n w bdcp t510w chinadcp t710w chinamfc j1800dw europemfc j1800dw usamfc j4340dwemfc j4345dwxlmfc j805dwxlmfc j815dwxlmfc j995dwxlmfc t810w chinadcp b7520dw chinadcp b7535dw chinadcp l2535dw chinadcp l2540dw japandcp l2550dw chinadcp l2550dw japandcp l2550dw taiwanhl l2361dnmfc l2700dw asiamfc l2715dw taiwan korea hong kongmfc l2740dw japanmfc l2750dw japanmfc l3770cdw japanmfc l5755dw japanmfc l6900dw japanmfc l8610cdw japanmfc l9570cdw japantd 2130nsatd 2135nsatd 2135nwbtd 2135nwbsadcp j587ndcp j973n w bdcp j978n w bdcp j982n w bsp 1 japanmfc j903nhl l8260cdwhl l8360cdwhl l8360cdwthl l9310cdwdcp l8410cdwmfc l8610cdwmfc l8690cdwmfc l8900cdwmfc l9570cdwmfc l9577cdwhl l2325dwhl l2350dwhl l2351dwhl l2352dwhl l2357dwhl l2370dnhl l2371dnhl l2372dnhl 2590dnhl l2370dwhl l2370dwxlhl l2375dwhl l2376dwhl b2050dnhl b2080dwhl l2385dwhl l2386dwhl 2595dwhl l2350dwrhl l2370dnrhl l2375dwrhl l2395dwmfc l2730dwmfc l2732dwmfc l2750dwmfc l2750dwxlmfc l2751dwmfc l2770dwmfc l2771dwmfc l2730dwrmfc l2750dwrdcp 7195dwmfc 7895dwmfc l2730dnhl l2390dwdcp l2530dwdcp l2531dwdcp l2532dwdcp l2535dwdcp l2537dwdcp b7520dwdcp l2550dndcp l2550dwdcp l2551dndcp l2551dwdcp l2552dndcp b7535dwmfc l2690dwmfc l2710dnmfc l2712dnmfc l2710dwmfc l2712dwmfc l2713dwmfc l2715dwmfc l2716dwmfc l2717dwmfc b7715dwdcp l2530dwrdcp l2550dnrmfc l2710dnrmfc l2710dwrfax l2710dndcp 7190dndcp b7530dnmfc 7890dnmfc b7720dndcp 7090dwdcp 7190dwhl l3210cwhl l3230cdnhl l3230cdwhl 3160cdwhl l3270cdwhl 3190cdwdcp l3510cdwdcp l3517cdwhl l3290cdwdcp l3551cdwdcp l3550cdwdcp 9030cdnmfc l3710cdwmfc l3730cdnmfc 9150cdnmfc l3735cdnmfc l3745cdwmfc l3750cdwmfc 9350cdwmfc l3770cdwhl l6250dwhl 5595dnhhl 5595dnhl l6250dnhl l6202dwhl l6200dwhl l5202dwhl l5200dwhl l5050dnhl 5590dnhl l5100dnhl l5102dwhl l5100dnthl l5200dwthl l6200dwthl l6450dwhl l6402dwhl l6400dwhl l6300dwhl l6300dwthl l6400dwthl l6400dwgmfc l6970dwmfc l6950dwmfc l6902dwmfc l6900dwmfc l6800dwmfc l6750dwmfc l6702dwmfc l6700dwmfc l5902dwmfc l5900dwmfc l5850dwmfc l5802dwmfc l5800dwmfc 8540dnmfc l5755dwmfc l5750dwmfc 8530dnmfc l5700dnmfc l5702dwmfc l5700dwdcp l6600dwdcp l5652dndcp l5650dndcp l5602dndcp l5600dndcp l5502dndcp l5500dnmfc l6900dwghl l2305whl l2315dwhl l2340dwhl l2340dwrhl l2360dnhl l2360dwhl l2365dwhl l2366dwhl 2560dnhl 2569dwhl l2360dnrhl l2365dwrdcp l2520dwdcp l2520dwrdcp l2540dndcp l2540dwdcp l2541dwdcp l2540dnrdcp l2560dwhl l2380dwdcp l2560dwrdcp 7180dndcp 7189dwmfc l2680wmfc l2685dwmfc l2700dwmfc l2700dnmfc l2700dwrmfc l2701dwmfc l2703dwmfc l2705dwmfc l2707dwmfc l2720dwmfc l2720dwrmfc l2740dwmfc l2740dwrmfc 7880dnmfc 7889dwfax l2700dnmfc l2720dnhl 1210whl 1210wehl 1210wrhl 1211whl 1212whl 1212wehl 1222wehl 1223wehl 1223wrhl 1212wrhl 1218wdcp 1610wdcp 1610wedcp 1610wrdcp 1612wdcp 1622wedcp 1623wedcp 1623wrdcp 1612wedcp 1612wrdcp 1615nwdcp 1616nwdcp 1617nwdcp 1618wmfc 1910wmfc 1910wemfc 1912wrmfc 1911wmfc 1915wmfc 1911nwmfc 1916nwmfc 1919nwdcp t520wdcp t525wdcp t720dwdcp t725dwdcp t820dwdcp t825dwmfc t920dwmfc t925dwdcp t220dcp t225dcp t226dcp t420wdcp t425wdcp t426wdcp t428wdcp c421wmfc j1205w xlmfc j1215wdcp j1200w xldcp j1200ndcp j1200wemfc j4335dw xlmfc j4340dw xlmfc j4535dw xlmfc j4540dw xlmfc j4440dwdcp j4140nmfc j4440nmfc j4540nmfc j4940dnsp 1mfc j1010dwmfc j1012dwdcp j1050dwmfc j1170dwdcp j1140dwdcp j526ndcp j914nmfc j926n wbmfc j904nmfc j739dnmfc j739dwnmfc j939dnmfc j939dwndcp j1800ndcp j1700dwdcp j1203ndcp c1210ndcp j4143nmfc j4443ndcp j4543ndcp j528ndcp j915nmfc j905nmfc j805dwdcp j1100dwmfc j995dwmfc j1300dwdcp j988nmfc j1500nmfc j1605dnmfc j5845dw xlmfc j5945dwmfc j6945dwmfc j6947dwhl j6000dwhl j6100dwmfc j6997cdwmfc j6999cdwhl j6000cdwmfc t4500dwhl t4000dwmfc j5330dwmfc j5335dwmfc j2330dwmfc j5730dwmfc j5830dwmfc j5930dwmfc j2730dwmfc j6530dwmfc j6730dwmfc j3530dwmfc j6930dwmfc j6935dwmfc j3930dwmfc j6535dwmfc j6580cdwmfc j6980cdwmfc j6995cdwmfc j5630cdwmfc j6583cdwmfc j6983cdwdcp t510wdcp t710wmfc t810wmfc t910dwdcp j572dwmfc j491dwmfc j497dwdcp j772dwdcp j774dwmfc j890dwmfc j895dwmfc j690dwdcp j572ndcp j577ndcp j582ndcp j972ndcp j981nmfc j893nmfc j898nmfc j738dnmfc j738dwnmfc j998dnmfc j998dwnql 820nwbctd 2135npj 883rj 3250wbrj 4250wbtd 4420dntd 4550dnwbql 1115nwbql 820nwbrj 2150rj 2050rj 2140pt p900wpt p950nwpj 773rj 3150rj 3050pt p750wtd 2130ndocuprint p360 dwdocuprint p378 ddocuprint p375 ddocuprint p375 dwdocuprint p378 dwdocuprint p385 dwdocuprint p388 dwdocuprint m378 ddocuprint m375 dfdocuprint m378 dfdocuprint m375 zdocuprint m385 zdocuprint p235 ddocuprint p275 dwdocuprint p285 dwdocuprint p288 dwdocuprint m235 dwdocuprint m235 zdocuprint m275 zdocuprint m285 zdocuprint m288 dwdocuprint m288 zdocuprint p225 ddocuprint p268 ddocuprint p268 dwdocuprint p265 dwdocuprint p260 dwdocuprint m268 dwdocuprint m268 zdocuprint m225 dwdocuprint m225 zdocuprint m265 zdocuprint m260 zdocuprint p118 wdocuprint p115 wdocuprint m118 wdocuprint m118 zdocuprint m115 wdocuprint m115 fwdocuprint m115 zsp 230dnwp 201wm 340wsp 230sfnwm 340fwe studio301dne studio302dnfbizhub 5020ibizhub 5000ibizhub 4020ibizhub 4000ibizhub 3080mfbizhub 3000mf

Every base score collected

Sources score independently and disagree; each row says who scored it and under which version.

ScoreVersionSeverityExpl.ImpactSource
5.3CVSS 3.1MEDIUM——cvelistV5

Weakness & attack patterns

  • CWE-538

Public exploit

Capability, not use: code existing is a different claim from anyone running it.

Indexed by

metasploitpoc in github

Detection

Read off the CVSS vector and the weakness class. Starting points, not rules we have tested.

  • Search application, proxy, and WAF logs for requests touching /etc/mnt_info.csv.

References

11 on the record

Elsewhere on this site

Not in any source we poll

Listed rather than left blank: an empty field and an unmeasured one look identical on screen, and only one is a reason to look elsewhere.

  • No confirmed IOCs, IP addresses, domains, file hashes, or malware artifacts supplied.
  • No organization-specific asset inventory, compensating-control status, or patch deployment evidence supplied.
  • No exploit packet captures, log samples, or incident case IDs supplied.