CVE Intelligence
Skip to main content
MEDIUM

CVE-2024-51984

CVE-2024-51984 — Authenticated disclosure of external service passwords via pass-back attack affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation

An authenticated attacker can reconfigure the target device to use an external service (such as LDAP or FTP) controlled by the attacker. If an existing password is present for an external service, the attacker can force the target device to authenticate to an attacker controlled device using the existing credentials for that external service. In the case of an external LDAP or FTP service, this will disclose the plaintext password for that external service to the attacker.

Published Updated Sources: cvelistV5, rapid7

Triage

Is it exploited, how likely is exploitation, what does it touch, and how severe do the scoring sources call it.

Exploitation

Unreported

no source claims exploitation

EPSS

1%

chance of exploitation in 30 days

Affects

brother industries

739 products listed

CVSS base

6.8

MEDIUM

CISA SSVC assessment

Three decision points CISA publishes for the CVEs it assesses · SSVC 2.0.3. A stakeholder decision, not a severity score.

CISA

Exploitation

PoC

none · proof-of-concept · active

Automatable

No

can an attacker script all four kill-chain steps

Technical impact

Partial

partial · total control of the vulnerable component

Affected scope

The catalog records vendors and products as separate lists, not pairs, so which product belongs to which vendor is not something this page can say.

Products (739)

hl l8260cdnhl l8260cdwhl l8360cdwhl l8360cdwthl l9310cdwdcp l8410cdwmfc l8610cdwmfc l8690cdwmfc l8900cdwmfc l9570cdwmfc l9577cdwhl l5210dnhl l5212dnhl l5215dnhl l5210dwhl l5210dwthl l5212dwhl l5215dwhl l6210dwhl l6210dwthl l6217dwhl l5218dnhl l5228dwhl l6310dwhl l6410dnhl l6415dnhl l6412dwhl l6415dwhl l6415dwthl l6418dwhl ex415dwdcp l5510dndcp l5512dndcp l5518dndcp l5510dwdcp l5610dndcp l5660dndcp l5662dnmfc l5710dnmfc l5715dnmfc l5718dnmfc l5710dwmfc l5715dwmfc l5717dwmfc l5728dwmfc l5912dwmfc l5915dwmfc l6710dwmfc l6720dwmfc l6810dwmfc l6910dnmfc l6915dnmfc l6912dwmfc l6915dwmfc ex910mfc ex915dwmfc l6820dwhl l9410cdnhl l9430cdnhl l9470cdnhl ex470wmfc l9610cdnmfc l9630cdnmfc l9635cdnmfc l9670cdnmfc ex670whl l8245cdwhl l8240cdwhl l8230cdwhl l3295cdwhl l3288cdwhl l3280cdwhl l3240cdwhl l3220cwehl l3220cwhl l3220cdwhl l3215cwhl l3228cdwdcp l3555cdwdcp l3560cdwdcp l3568cdwmfc l3720cdwmfc l3740cdwmfc l3740cdwemfc l3755cdwmfc l3760cdwmfc l3765cdwmfc l3768cdwmfc l3780cdwmfc l8340cdwmfc l8390cdwmfc l8395cdwhl l3300cdwdcp l3515cdwdcp l3520cdwdcp l3520cdwedcp l3528cdwhl b2100dhl b2100dbhl b2150whl b2180dwhl b2180dwbhl b2181dwhl l2400dwhl l2400dwehl l2405whl l2420dwhl l2425dwhl l2440dwhl l2445dwhl l2447dwhl l2460dnhl l2461dnhl l2460dwhl l2460dwxlhl l2467dwhl l2865dwhl b2158whl b2188dwdcp l2600ddcp b7600dbdcp b7600ddcp l2627dwedcp b7620dwbdcp b7620dwdcp l2627dwdcp b7640dwbdcp l2627dwxldcp b7640dwdcp l2605dwhl l2464dwdcp l2622dwdcp l2625dwdcp l2620dwhl l2475dwhl l2465dwdcp l2640dndcp l2647dwdcp l2640dwmfc l2802dnmfc l2827dwmfc l2806dwmfc l2805dwmfc l2802dwmfc l2800dwmfc l2765dwmfc l2760dwmfc b7800dnmfc b7811dwmfc b7810dwbmfc b7810dwmfc l2835dwmfc l2827dwxldcp b7548wdcp b7558wdcp b7578dwdcp l2508dwdcp l2518dwdcp b7608wdcp b7628dwdcp b7638dndcp b7648dwdcp l2628dwdcp l2548dwdcp l2648dwdcp l2600dwfax l2800dwdcp l2680dwdcp l2660dwhl l2480dwdcp l2665dwmfc l2817dwmfc l2807dwmfc l2820dwxlmfc l2820dwmfc l2861dwmfc l2862dwmfc l2860dwmfc l2885dwmfc l2880dwxlmfc l2886dwmfc l2860dwemfc l2880dwmfc l2900dwmfc l2900dwxldcp b7658dwdcp b7650dwmfc l2920dwmfc l2922dwmfc l2960dwmfc l2980dwhl l1230whl l1232whl l1808whl l1238wdcp l1630wdcp l1632wdcp l1638wdcp l1848whl l2325dwhl l2350dwhl l2351dwhl l2352dwhl l2357dwhl l2370dnhl l2371dnhl l2372dnhl 2590dnhl l2370dwhl l2370dwxlhl l2375dwhl l2376dwhl b2050dnhl b2080dwhl l2385dwhl l2386dwhl 2595dwhl l2350dwrhl l2370dnrhl l2375dwrhl l2395dwmfc l2730dwmfc l2732dwmfc l2750dwmfc l2750dwxlmfc l2751dwmfc l2770dwmfc l2771dwmfc l2730dwrmfc l2750dwrdcp 7195dwmfc 7895dwmfc l2730dnhl l2390dwdcp l2530dwdcp l2531dwdcp l2532dwdcp l2535dwdcp l2537dwdcp b7520dwdcp l2550dndcp l2550dwdcp l2551dndcp l2551dwdcp l2552dndcp b7535dwmfc l2690dwmfc l2710dnmfc l2712dnmfc l2710dwmfc l2712dwmfc l2713dwmfc l2715dwmfc l2716dwmfc l2717dwmfc b7715dwdcp l2530dwrdcp l2550dnrmfc l2710dnrmfc l2710dwrfax l2710dndcp 7190dndcp b7530dnmfc 7890dnmfc b7720dndcp 7090dwdcp 7190dwhl l3210cwhl l3230cdnhl l3230cdwhl 3160cdwhl l3270cdwhl 3190cdwdcp l3510cdwdcp l3517cdwhl l3290cdwdcp l3551cdwdcp l3550cdwdcp 9030cdnmfc l3710cdwmfc l3730cdnmfc 9150cdnmfc l3735cdnmfc l3745cdwmfc l3750cdwmfc 9350cdwmfc l3770cdwhl l6250dwhl 5595dnhhl 5595dnhl l6250dnhl l6202dwhl l6200dwhl l5202dwhl l5200dwhl l5050dnhl 5590dnhl l5100dnhl l5102dwhl l5100dnthl l5200dwthl l6200dwthl l6450dwhl l6402dwhl l6400dwhl l6300dwhl l6300dwthl l6400dwthl l6400dwgmfc l6970dwmfc l6950dwmfc l6902dwmfc l6900dwmfc l6800dwmfc l6750dwmfc l6702dwmfc l6700dwmfc l5902dwmfc l5900dwmfc l5850dwmfc l5802dwmfc l5800dwmfc 8540dnmfc l5755dwmfc l5750dwmfc 8530dnmfc l5700dnmfc l5702dwmfc l5700dwdcp l6600dwdcp l5652dndcp l5650dndcp l5602dndcp l5600dndcp l5502dndcp l5500dnmfc l6900dwghl l2305whl l2315dwhl l2340dwhl l2340dwrhl l2360dnhl l2360dwhl l2365dwhl l2366dwhl 2560dnhl 2569dwhl l2360dnrhl l2365dwrdcp l2520dwdcp l2520dwrdcp l2540dndcp l2540dwdcp l2541dwdcp l2540dnrdcp l2560dwhl l2380dwdcp l2560dwrdcp 7180dndcp 7189dwmfc l2680wmfc l2685dwmfc l2700dwmfc l2700dnmfc l2700dwrmfc l2701dwmfc l2703dwmfc l2705dwmfc l2707dwmfc l2720dwmfc l2720dwrmfc l2740dwmfc l2740dwrmfc 7880dnmfc 7889dwfax l2700dnmfc l2720dnhl 1210whl 1210wehl 1210wrhl 1211whl 1212whl 1212wehl 1222wehl 1223wehl 1223wrhl 1212wrhl 1218wdcp 1610wdcp 1610wedcp 1610wrdcp 1612wdcp 1622wedcp 1623wedcp 1623wrdcp 1612wedcp 1612wrdcp 1615nwdcp 1616nwdcp 1617nwdcp 1618wmfc 1910wmfc 1910wemfc 1912wrmfc 1911wmfc 1915wmfc 1911nwmfc 1916nwmfc 1919nwdcp t830dwdcp t835dwmfc t930dwmfc t935dwdcp t530dwdcp t535dwdcp t536dwdcp t730dwdcp t735dwdcp t230dcp t236dcp t238dcp t435wdcp t430wdcp t436wdcp t439wmfc j5340dwmfc j5345dwmfc j2340dwmfc j5340dwemfc j5740dwmfc j2740dwmfc j6540dwmfc j6740dwmfc j3540dwmfc j7100cdwmfc j6540dwemfc j6940dwmfc j3940dwmfc j7300cdwmfc j5855dwmfc j5800cdwmfc j5955dwmfc j6555dwmfc j6955dwmfc j6957dwmfc j7500cdwmfc j7600cdwhl j6010dwhl j7010cdwmfc j6959dwmfc j7700cdwhl jf1dcp t520wdcp t525wdcp t720dwdcp t725dwdcp t820dwdcp t825dwmfc t920dwmfc t925dwdcp t220dcp t225dcp t226dcp t420wdcp t425wdcp t426wdcp t428wdcp c421wmfc j1205w xlmfc j1215wdcp j1200w xldcp j1200ndcp j1200wemfc j4335dw xlmfc j4340dw xlmfc j4535dw xlmfc j4540dw xlmfc j4440dwdcp j4140nmfc j4440nmfc j4540nmfc j4940dnsp 1mfc j1010dwmfc j1012dwdcp j1050dwmfc j1170dwdcp j1140dwdcp j526ndcp j914nmfc j926n wbmfc j904nmfc j739dnmfc j739dwnmfc j939dnmfc j939dwndcp j1800ndcp j1700dwdcp j1203ndcp c1210ndcp j4143nmfc j4443ndcp j4543ndcp j528ndcp j915nmfc j905nmfc j805dwdcp j1100dwmfc j995dwmfc j1300dwdcp j988nmfc j1500nmfc j1605dnmfc j5845dw xlmfc j5945dwmfc j6945dwmfc j6947dwhl j6000dwhl j6100dwmfc j6997cdwmfc j6999cdwhl j6000cdwmfc t4500dwhl t4000dwmfc j5330dwmfc j5335dwmfc j2330dwmfc j5730dwmfc j5830dwmfc j5930dwmfc j2730dwmfc j6530dwmfc j6730dwmfc j3530dwmfc j6930dwmfc j6935dwmfc j3930dwmfc j6535dwmfc j6580cdwmfc j6980cdwmfc j6995cdwmfc j5630cdwmfc j6583cdwmfc j6983cdwdcp t510wdcp t710wmfc t810wmfc t910dwdcp j572dwmfc j491dwmfc j497dwdcp j772dwdcp j774dwmfc j890dwmfc j895dwmfc j690dwdcp j572ndcp j577ndcp j582ndcp j972ndcp j973n w bdcp j978n w bdcp j981ndcp j982n w bmfc j893nmfc j898nmfc j738dnmfc j738dwnmfc j998dnmfc j998dwndcp j587nads 2400nads 3000nads 2800wads 3600wads 2700wads 1700wads 3300wads 4500wads 2700weads 4300nads 4700wads 4900wads 1800wtd 2320dtd 2350dtd 2320dsatd 2350dsaql 820nwbctd 2135npj 883rj 3250wbrj 4250wbtd 4420dntd 4550dnwbql 820nwbrj 2150rj 2050rj 2140td 2130ndocuprint p360 dwdocuprint p378 ddocuprint p375 ddocuprint p375 dwdocuprint p378 dwdocuprint p385 dwdocuprint p388 dwdocuprint m378 ddocuprint m375 dfdocuprint m378 dfdocuprint m375 zdocuprint m385 zdocuprint p235 ddocuprint p275 dwdocuprint p285 dwdocuprint p288 dwdocuprint m235 dwdocuprint m235 zdocuprint m275 zdocuprint m285 zdocuprint m288 dwdocuprint m288 zdocuprint p225 ddocuprint p268 ddocuprint p268 dwdocuprint p265 dwdocuprint p260 dwdocuprint m268 dwdocuprint m268 zdocuprint m225 dwdocuprint m225 zdocuprint m265 zdocuprint m260 zdocuprint p118 wdocuprint p115 wdocuprint m118 wdocuprint m118 zdocuprint m115 wdocuprint m115 fwdocuprint m115 zsp 230dnwp 201wm 340wsp 230sfnwm 340fwe studio301dne studio302dnfbizhub 5020ibizhub 5000ibizhub 4020ibizhub 4000ibizhub 3080mfbizhub 3000mfdcp j1260wdcp j1270ndcp j1310dwdcp j1313dwdcp j1360dwdcp j1460dwdcp j928n w bdcp j987n w bdcp t510w chinadcp t580dwdcp t583dwdcp t710w chinadcp t780dwmfc j1260wmfc j1360dwmfc j1365dwmfc j1410dwmfc j1800dw europemfc j1800dw usamfc j4340dwemfc j4345dwxlmfc j4350dwmfc j4355dwmfc j4550dwmfc j4555dwmfc j5855dwxlmfc j6555dwxlmfc j805dwxlmfc j815dwxlmfc j995dwxlmfc t580dwmfc t780dwmfc t810w chinamfc t980dwdcp b7520dw chinadcp b7535dw chinadcp b7640dw asiadcp l2535dw chinadcp l2540dw japandcp l2550dw chinadcp l2550dw japandcp l2550dw taiwandcp l2660dw japanhl l2361dnhl l5210dn japanhl l5210dw japanhl l6310dw japanmfc ex670mfc l2700dw asiamfc l2715dw taiwan korea hong kongmfc l2740dw japanmfc l2750dw japanmfc l2805dw asiamfc l2860dw japanmfc l2880dw japanmfc l3770cdw japanmfc l3780cdw japanmfc l5710dw japanmfc l5755dw japanmfc l6900dw japanmfc l8610cdw japanmfc l9570cdw japanpj 773pt p750wpt p900wpt p950nwql 1115nwbrj 3050rj 3150td 2130nsatd 2135nsatd 2135nwbtd 2135nwbsadcp j4250ndcp j529ndcp j916ndcp j929n w bmfc j4450nmfc j4950dnmfc j742dnmfc j742dwnmfc j908nmfc j943dnmfc j943dwnsp 1 japanmfc j903n

Every base score collected

Sources score independently and disagree; each row says who scored it and under which version.

ScoreVersionSeverityExpl.ImpactSource
6.8CVSS 3.1MEDIUM——cvelistV5

Weakness & attack patterns

  • CWE-522

Attack patterns reported against this CVE. The ATT&CK techniques below are inferred from its weakness class.

  • T1552.004Unsecured Credentials: Private Keys
  • T1558.003Steal or Forge Kerberos Tickets: Kerberoasting
  • T1543Create or Modify System Process

References

10 on the record

Elsewhere on this site

Not in any source we poll

Listed rather than left blank: an empty field and an unmeasured one look identical on screen, and only one is a reason to look elsewhere.

  • No confirmed IOCs, IP addresses, domains, file hashes, or malware artifacts supplied.
  • No organization-specific asset inventory, compensating-control status, or patch deployment evidence supplied.
  • No exploit packet captures, log samples, or incident case IDs supplied.