CVE Intelligence
Skip to main content
CRITICALpublic exploit

CVE-2024-51978

CVE-2024-51978 — Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.

An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request.

Published Updated Sources: cvelistV5, rapid7

Triage

Is it exploited, how likely is exploitation, what does it touch, and how severe do the scoring sources call it.

Exploitation

Exploit code

public exploit, none observed

EPSS

19%

chance of exploitation in 30 days

Affects

brother industries

605 products listed

CVSS base

9.8

CRITICAL

CISA SSVC assessment

Three decision points CISA publishes for the CVEs it assesses · SSVC 2.0.3. A stakeholder decision, not a severity score.

CISA

Exploitation

PoC

none · proof-of-concept · active

Automatable

Yes

can an attacker script all four kill-chain steps

Technical impact

Total

partial · total control of the vulnerable component

Affected scope

The catalog records vendors and products as separate lists, not pairs, so which product belongs to which vendor is not something this page can say.

Products (605)

dcp j928n w bmfc j1800dw europemfc j1800dw usamfc j4340dwemfc j4345dwxlmfc j5855dwxlmfc j6555dwxldcp b7520dw chinadcp b7535dw chinadcp b7640dw asiadcp l2535dw chinadcp l2540dw japandcp l2550dw chinadcp l2550dw japandcp l2550dw taiwandcp l2660dw japanhl l2361dnhl l5210dn japanhl l5210dw japanhl l6310dw japanmfc ex670mfc l2700dw asiamfc l2715dw taiwan korea hong kongmfc l2740dw japanmfc l2750dw japanmfc l2805dw asiamfc l2860dw japanmfc l2880dw japanmfc l3770cdw japanmfc l3780cdw japanmfc l5710dw japanmfc l5755dw japanmfc l6900dw japanmfc l8610cdw japanmfc l9570cdw japands 940dwmds 940dwtd 2130nsatd 2135nsatd 2135nwbtd 2135nwbsasp 1 japanhl l8260cdnhl l8260cdwhl l8360cdwhl l8360cdwthl l9310cdwdcp l8410cdwmfc l8610cdwmfc l8690cdwmfc l8900cdwmfc l9570cdwmfc l9577cdwhl l5210dnhl l5212dnhl l5215dnhl l5210dwhl l5210dwthl l5212dwhl l5215dwhl l6210dwhl l6210dwthl l6217dwhl l5218dnhl l5228dwhl l6310dwhl l6410dnhl l6415dnhl l6412dwhl l6415dwhl l6415dwthl l6418dwhl ex415dwdcp l5510dndcp l5512dndcp l5518dndcp l5510dwdcp l5610dndcp l5660dndcp l5662dnmfc l5710dnmfc l5715dnmfc l5718dnmfc l5710dwmfc l5715dwmfc l5717dwmfc l5728dwmfc l5912dwmfc l5915dwmfc l6710dwmfc l6720dwmfc l6810dwmfc l6910dnmfc l6915dnmfc l6912dwmfc l6915dwmfc ex910mfc ex915dwmfc l6820dwhl l9410cdnhl l9430cdnhl l9470cdnhl ex470wmfc l9610cdnmfc l9630cdnmfc l9635cdnmfc l9670cdnmfc ex670whl l8245cdwhl l8240cdwhl l8230cdwhl l3295cdwhl l3288cdwhl l3280cdwhl l3240cdwhl l3220cwehl l3220cwhl l3220cdwhl l3215cwhl l3228cdwdcp l3555cdwdcp l3560cdwdcp l3568cdwmfc l3720cdwmfc l3740cdwmfc l3740cdwemfc l3755cdwmfc l3760cdwmfc l3765cdwmfc l3768cdwmfc l3780cdwmfc l8340cdwmfc l8390cdwmfc l8395cdwhl l3300cdwdcp l3515cdwdcp l3520cdwdcp l3520cdwedcp l3528cdwhl b2100dhl b2100dbhl b2150whl b2180dwhl b2180dwbhl b2181dwhl l2400dwhl l2400dwehl l2405whl l2420dwhl l2425dwhl l2440dwhl l2445dwhl l2447dwhl l2460dnhl l2461dnhl l2460dwhl l2460dwxlhl l2467dwhl l2865dwhl b2158whl b2188dwdcp l2600ddcp b7600dbdcp b7600ddcp l2627dwedcp b7620dwbdcp b7620dwdcp l2627dwdcp b7640dwbdcp l2627dwxldcp b7640dwdcp l2605dwhl l2464dwdcp l2622dwdcp l2625dwdcp l2620dwhl l2475dwhl l2465dwdcp l2640dndcp l2647dwdcp l2640dwmfc l2802dnmfc l2827dwmfc l2806dwmfc l2805dwmfc l2802dwmfc l2800dwmfc l2765dwmfc l2760dwmfc b7800dnmfc b7811dwmfc b7810dwbmfc b7810dwmfc l2835dwmfc l2827dwxldcp b7548wdcp b7558wdcp b7578dwdcp l2508dwdcp l2518dwdcp b7608wdcp b7628dwdcp b7638dndcp b7648dwdcp l2628dwdcp l2548dwdcp l2648dwdcp l2600dwfax l2800dwdcp l2680dwdcp l2660dwhl l2480dwdcp l2665dwmfc l2817dwmfc l2807dwmfc l2820dwxlmfc l2820dwmfc l2861dwmfc l2862dwmfc l2860dwmfc l2885dwmfc l2880dwxlmfc l2886dwmfc l2860dwemfc l2880dwmfc l2900dwmfc l2900dwxldcp b7658dwdcp b7650dwmfc l2920dwmfc l2922dwmfc l2960dwmfc l2980dwhl l1230whl l1232whl l1808whl l1238wdcp l1630wdcp l1632wdcp l1638wdcp l1848whl l2325dwhl l2350dwhl l2351dwhl l2352dwhl l2357dwhl l2370dnhl l2371dnhl l2372dnhl 2590dnhl l2370dwhl l2370dwxlhl l2375dwhl l2376dwhl b2050dnhl b2080dwhl l2385dwhl l2386dwhl 2595dwhl l2350dwrhl l2370dnrhl l2375dwrhl l2395dwmfc l2730dwmfc l2732dwmfc l2750dwmfc l2750dwxlmfc l2751dwmfc l2770dwmfc l2771dwmfc l2730dwrmfc l2750dwrdcp 7195dwmfc 7895dwmfc l2730dnhl l2390dwdcp l2530dwdcp l2531dwdcp l2532dwdcp l2535dwdcp l2537dwdcp b7520dwdcp l2550dndcp l2550dwdcp l2551dndcp l2551dwdcp l2552dndcp b7535dwmfc l2690dwmfc l2710dnmfc l2712dnmfc l2710dwmfc l2712dwmfc l2713dwmfc l2715dwmfc l2716dwmfc l2717dwmfc b7715dwdcp l2530dwrdcp l2550dnrmfc l2710dnrmfc l2710dwrfax l2710dndcp 7190dndcp b7530dnmfc 7890dnmfc b7720dndcp 7090dwdcp 7190dwhl l3210cwhl l3230cdnhl l3230cdwhl 3160cdwhl l3270cdwhl 3190cdwdcp l3510cdwdcp l3517cdwhl l3290cdwdcp l3551cdwdcp l3550cdwdcp 9030cdnmfc l3710cdwmfc l3730cdnmfc 9150cdnmfc l3735cdnmfc l3745cdwmfc l3750cdwmfc 9350cdwmfc l3770cdwhl l6250dwhl 5595dnhhl 5595dnhl l6250dnhl l6202dwhl l6200dwhl l5202dwhl l5200dwhl l5050dnhl 5590dnhl l5100dnhl l5102dwhl l5100dnthl l5200dwthl l6200dwthl l6450dwhl l6402dwhl l6400dwhl l6300dwhl l6300dwthl l6400dwthl l6400dwgmfc l6970dwmfc l6950dwmfc l6902dwmfc l6900dwmfc l6800dwmfc l6750dwmfc l6702dwmfc l6700dwmfc l5902dwmfc l5900dwmfc l5850dwmfc l5802dwmfc l5800dwmfc 8540dnmfc l5755dwmfc l5750dwmfc 8530dnmfc l5700dnmfc l5702dwmfc l5700dwdcp l6600dwdcp l5652dndcp l5650dndcp l5602dndcp l5600dndcp l5502dndcp l5500dnmfc l6900dwghl l2305whl l2315dwhl l2340dwhl l2340dwrhl l2360dnhl l2360dwhl l2365dwhl l2366dwhl 2560dnhl 2569dwhl l2360dnrhl l2365dwrdcp l2520dwdcp l2520dwrdcp l2540dndcp l2540dwdcp l2541dwdcp l2540dnrdcp l2560dwhl l2380dwdcp l2560dwrdcp 7180dndcp 7189dwmfc l2680wmfc l2685dwmfc l2700dwmfc l2700dnmfc l2700dwrmfc l2701dwmfc l2703dwmfc l2705dwmfc l2707dwmfc l2720dwmfc l2720dwrmfc l2740dwmfc l2740dwrmfc 7880dnmfc 7889dwfax l2700dnmfc l2720dnhl 1210whl 1210wehl 1210wrhl 1211whl 1212whl 1212wehl 1222wehl 1223wehl 1223wrhl 1212wrhl 1218wdcp 1610wdcp 1610wedcp 1610wrdcp 1612wdcp 1622wedcp 1623wedcp 1623wrdcp 1612wedcp 1612wrdcp 1615nwdcp 1616nwdcp 1617nwdcp 1618wmfc 1910wmfc 1910wemfc 1912wrmfc 1911wmfc 1915wmfc 1911nwmfc 1916nwmfc 1919nwdcp t830dwdcp t835dwmfc t930dwmfc t935dwdcp t530dwdcp t535dwdcp t536dwdcp t730dwdcp t735dwdcp t230dcp t236dcp t238dcp t435wdcp t430wdcp t436wdcp t439wmfc j5340dwmfc j5345dwmfc j2340dwmfc j5340dwemfc j5740dwmfc j2740dwmfc j6540dwmfc j6740dwmfc j3540dwmfc j7100cdwmfc j6540dwemfc j6940dwmfc j3940dwmfc j7300cdwmfc j5855dwmfc j5800cdwmfc j5955dwmfc j6555dwmfc j6955dwmfc j6957dwmfc j7500cdwmfc j7600cdwhl j6010dwhl j7010cdwmfc j6959dwmfc j7700cdwhl jf1dcp t520wdcp t525wdcp t720dwdcp t725dwdcp t820dwdcp t825dwmfc t920dwmfc t925dwdcp t220dcp t225dcp t226dcp t420wdcp t425wdcp t426wdcp t428wdcp c421wmfc j1205w xlmfc j1215wdcp j1200w xldcp j1200ndcp j1200wemfc j4335dw xlmfc j4340dw xlmfc j4535dw xlmfc j4540dw xlmfc j4440dwdcp j4140nmfc j4440nmfc j4540nmfc j4940dnsp 1mfc j1010dwmfc j1012dwdcp j1050dwmfc j1170dwdcp j1140dwdcp j526ndcp j914nmfc j926n wbmfc j904nmfc j739dnmfc j739dwnmfc j939dnmfc j939dwndcp j1800ndcp j1700dwdcp j1203ndcp c1210ndcp j4143nmfc j4443ndcp j4543ndcp j528ndcp j915nmfc j905nmfc t4500dwhl t4000dwmfc j5630cdwmfc j6583cdwmfc j6983cdwdcp j587nads 2700wads 1250wads 1700wads 3300wads 4500wads 2700weads 4300nads 4700wads 4900wads 1350wads 1800wtd 2320dtd 2350dtd 2320dsatd 2350dsaql 820nwbctd 2135npj 883rj 3250wbrj 4250wbtd 4420dntd 4550dnwbql 1115nwbql 820nwbrj 2150rj 2140pt p900wpt p950nwpj 773rj 3150rj 3050pt p750wtd 2130ntd 4420tntd 4520tntd 4650tnwbtd 4750tnwbtd 4750tnwbrtj 4021tntj 4121tntj 4121tnrtj 4420tntj 4520tntj 4620tnvc 500we studio301dne studio302dnfbizhub 5020ibizhub 5000ibizhub 4020ibizhub 4000i

Every base score collected

Sources score independently and disagree; each row says who scored it and under which version.

ScoreVersionSeverityExpl.ImpactSource
9.8CVSS 3.1CRITICAL——cvelistV5

Weakness & attack patterns

  • CWE-1391

Public exploit

Capability, not use: code existing is a different claim from anyone running it.

Indexed by

metasploit

Detection

Read off the CVSS vector and the weakness class. Starting points, not rules we have tested.

  • Search application, proxy, and WAF logs for requests touching /HTTPS/IPP.

References

13 on the record

Elsewhere on this site

Not in any source we poll

Listed rather than left blank: an empty field and an unmeasured one look identical on screen, and only one is a reason to look elsewhere.

  • No confirmed IOCs, IP addresses, domains, file hashes, or malware artifacts supplied.
  • No organization-specific asset inventory, compensating-control status, or patch deployment evidence supplied.
  • No exploit packet captures, log samples, or incident case IDs supplied.