CVE Intelligence
Skip to main content
MEDIUM

CVE-2025-8452

CVE-2025-8452 — Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc.

By using the "uscan" protocol provided by the eSCL specification, an attacker can discover the serial number of multi-function printers that implement the Brother-provided firmware. This serial number can, in turn, can be leveraged by the flaw described by CVE-2024-51978 to calculate the default administrator password. This flaw is similar to CVE-2024-51977, with the only difference being the protocol by which an attacker can use to learn the remote device's serial number. The eSCL/uscan vector is typically only exposed on the local network. Any discovery service that implements the eSCL specification can be used to exploit this vulnerability, and one such implementation is the runZero Explorer. Changing the default administrator password will render this vulnerability virtually worthless, since the calculated default administrator password would no longer be the correct password.

Published Updated Sources: cvelistV5, AHA

Triage

Is it exploited, how likely is exploitation, what does it touch, and how severe do the scoring sources call it.

Exploitation

Unreported

no source claims exploitation

EPSS

0%

chance of exploitation in 30 days

Affects

brother industries

413 products listed

CVSS base

4.3

MEDIUM

CISA SSVC assessment

Three decision points CISA publishes for the CVEs it assesses · SSVC 2.0.3. A stakeholder decision, not a severity score.

CISA

Exploitation

None

none · proof-of-concept · active

Automatable

No

can an attacker script all four kill-chain steps

Technical impact

Partial

partial · total control of the vulnerable component

Affected scope

The catalog records vendors and products as separate lists, not pairs, so which product belongs to which vendor is not something this page can say.

Products (413)

dcp l8410cdwmfc l8610cdwmfc l8690cdwmfc l8900cdwmfc l9570cdwmfc l9577cdwmfc l8610cdw for japanmfc l9570cdw for japanhl l5218dnhl l5228dwdcp l5510dndcp l5512dndcp l5518dndcp l5510dwdcp l5610dndcp l5660dndcp l5662dnmfc l5710dnmfc l5715dnmfc l5718dnmfc l5710dwmfc l5715dwmfc l5717dwmfc l5728dwmfc l5912dwmfc l5915dwmfc l6710dwmfc l6720dwmfc l6810dwmfc l6910dnmfc l6915dnmfc l6915dn cspmfc l6912dwmfc l6915dwmfc ex910mfc ex915dwmfc l6820dwmfc l9610cdnmfc l9630cdnmfc l9635cdnmfc l9670cdnnfc ex670mfc ex670wdcp l3555cdwdcp l3560cdwdcp l3568cdwmfc l3720cdwmfc l3740cdwmfc l3740cdwemfc l3755cdwmfc l3760cdwmfc l3765cdwmfc l3768cdwmfc l3780cdwmfc l8340cdwmfc l8390cdwmfc l8395cdwhl l3300cdwdcp l3515cdwdcp l3520cdwdcp l3520cdwedcp l3528cdwdcp l2600ddcp b7600dbdcp b7600ddcp l2627dwedcp b7620dwbdcp b7620dwdcp l2627dwdcp b7640dwbdcp l2627dwxldcp b7640dwdcp l2605dwhl l2464dwdcp l2622dwdcp l2625dwdcp l2620dwhl l2475dwhl l2465dwdcp l2640dndcp l2647dwdcp l2640dwmfc l2802dnmfc l2827dwmfc l2806dwmfc l2805dwmfc l2802dwmfc l2800dwmfc l2765dwmfc l2760dwmfc b7800dnmfc b7811dwmfc b7810dwbmfc b7810dwmfc l2835dwmfc l2827dwxldcp b7548wdcp b7558wdcp b7578dwdcp l2508dwdcp l2518dwdcp b7608wdcp b7628dwdcp b7638dndcp b7648dwdcp l2628dwdcp l2548dwdcp l2648dwdcp l2600dwfax l2800dwdcp l2680dwdcp l2660dwhl l2480dwdcp l2665dwmfc l2817dwmfc l2807dwmfc l2820dwxlmfc l2820dwmfc l2861dwmfc l2862dwmfc l2860dwmfc l2885dwmfc l2880dwxlmfc l2886dwmfc l2860dwemfc l2880dwmfc l2900dwmfc l2900dwxldcp b7658dwdcp b7650dwmfc l2920dwmfc l2922dwmfc l2960dwmfc l2980dwdcp l1630wdcp l1632wdcp l1638wdcp l1848whl l2395dwmfc l2730dwmfc l2732dwmfc l2750dwmfc l2750dwxlmfc l2751dwmfc l2770dwmfc l2771dwmfc l2730dwrmfc l2750dwrdcp 7195dwmfc 7895dwmfc l2730dnhl l2390dwdcp l2530dwdcp l2531dwdcp l2532dwdcp l2535dwdcp l2537dwdcp b7520dwdcp l2550dndcp l2550dwdcp l2551dndcp l2551dwdcp l2552dndcp b7535dwmfc l2690dwmfc l2710dnmfc l2712dnmfc l2710dwmfc l2712dwmfc l2713dwmfc l2715dwmfc l2716dwmfc l2717dwmfc b7715dwdcp l2530dwrdcp l2550dnrmfc l2710dnrmfc l2710dwrfax l2710dndcp 7190dndcp b7530dndcp l2550dw twnmfc 7890dnmfc b7720dnmfc l2715dw for tiwan koriadcp 7090dwdcp 7190dwdcp l3510cdwdcp l3517cdwhl l3290cdwdcp l3551cdwdcp l3550cdwdcp 9030cdnmfc l3710cdwmfc l3730cdnmfc 9150cdnmfc l3735cdnmfc l3745cdwmfc l3750cdwmfc 9350cdwmfc l3770cdwmfc l6970dwmfc l6950dwmfc l6902dwmfc l6900dwmfc l6800dwmfc l6750dwmfc l6702dwmfc l6700dwmfc l5902dwmfc l5900dwmfc l5850dwmfc l5802dwmfc l5800dwmfc 8540dnmfc l5755dwmfc l5750dwmfc 8530dnmfc l5700dnmfc l5702dwmfc l5700dwdcp l6600dwdcp l5652dndcp l5650dndcp l5602dndcp l5600dndcp l5502dndcp l5500dnmfc l6900dwgdcp t830dwdcp t835dwmfc t930dwmfc t935dwdcp t530dwdcp t535dwdcp t536dwdcp t730dwdcp t735dwdcp t435wdcp t430wdcp t436wdcp t439wmfc j5340dwmfc j5345dwmfc j2340dwmfc j5340dwemfc j5740dwmfc j6540dwmfc j6740dwmfc j3540dwmfc j7100cdwmfc j6540dwemfc j6940dwmfc j3940dwmfc j7300cdwmfc j5855dwmfc j5855dw xlmfc j5800cdwmfc j5955dwmfc j6555dwmfc j6555dw xlmfc j6955dwmfc j6957dwmfc j7500cdwmfc j7600cdwmfc j6959dwmfc j7700cdwdcp t520wdcp t525wdcp t720dwdcp t725dwdcp t820dwdcp t825dwmfc t920dwmfc t925dwdcp t220dcp t225dcp t226dcp t420wdcp t425wdcp t426wdcp t428wdcp c421wmfc j1205w xlmfc j1215wdcp j1200w xldcp j1200ndcp j1200wemfc j4335dw xlmfc j4340dw xlmfc j4345dw xlmfc 4340dwemfc j4535dw xlmfc j4540dw xlmfc j4440dwdcp j4140nmfc j4440nmfc j4540nmfc j4940dnmfc j1010dwmfc j1012dwdcp j1050dwmfc j1170dwdcp j1140dwdcp j526ndcp j914nmfc j926n wbmfc j904nmfc j739dnmfc j739dwnmfc j939dnmfc j939dwndcp j1800ndcp j1700dwdcp j1800dwmfc j1800dwdcp j1203ndcp c1210ndcp j4143nmfc j4443ndcp j4543ndcp j528ndcp j915ndcp j928n wbmfc j905nmfc j815dw xlmfc j805dwmfc j805dw xldcp j1100dwmfc j995dwmfc j995dw xlmfc j1300dwdcp j988nmfc j1500nmfc j1605dnmfc j5845dw xlmfc j5945dwmfc j6945dwmfc j6947dwhl j6000dwhl j6100dwmfc j6997cdwmfc j6999cdwhl j6000cdwmfc t4500dwmfc j5330dwmfc j5335dwmfc j2330dwmfc j5730dwmfc j5830dwmfc j5930dwmfc j2730dwmfc j6530dwmfc j6730dwmfc j3530dwmfc j6930dwmfc j6935dwmfc j3930dwmfc j6535dwmfc j6580cdwmfc j6980cdwmfc j6995cdwmfc j5630cdwmfc j6583cdwmfc j6983cdwdcp t510wdcp t510w for chinadcp t710wdcp t710w for chinamfc t810wmfc t810w for chinamfc t910dwdcp j572dwmfc j491dwmfc j497dwdcp j772dwdcp j774dwmfc j890dwmfc j895dwmfc j690dwdcp j572ndcp j577ndcp j582ndcp j972ndcp j973n w bdcp j978n w bdcp j981ndcp j982n w bmfc j893nmfc j898nnfc j903nmfc j738dnmfc j738dwnmfc j998dnmfc j998dwndcp j587ndcp j987n wdcp j987n bds mds 940dwads 3300wads 4500wads 2700weads 4300nads 4700wads 4900wads 1350wads 1800we studio301dne studio302dnfbizhub 5020ibizhub 5000ibizhub 4020ibizhub 4000i

Every base score collected

Sources score independently and disagree; each row says who scored it and under which version.

ScoreVersionSeverityExpl.ImpactSource
4.3CVSS 3.1MEDIUM——cvelistV5

Weakness & attack patterns

  • CWE-538

Detection

Read off the CVSS vector and the weakness class. Starting points, not rules we have tested.

  • Search application, proxy, and WAF logs for requests touching /uscan.

References

5 on the record

Elsewhere on this site

Not in any source we poll

Listed rather than left blank: an empty field and an unmeasured one look identical on screen, and only one is a reason to look elsewhere.

  • No confirmed IOCs, IP addresses, domains, file hashes, or malware artifacts supplied.
  • No organization-specific asset inventory, compensating-control status, or patch deployment evidence supplied.
  • No exploit packet captures, log samples, or incident case IDs supplied.