Medium severity · published Mar 18, 2024
CVE-2024-21824
Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If this vulnerability is exploited, a network-adjacent user who can access the product may impersonate an administrative user. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MP
Multiple printers and scanners · BROTHER INDUSTRIES, LTD.
see the information provided by the vendor · source: vendor
Affected product
MP
Multiple printers and scanners
BROTHER INDUSTRIES, LTD.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-21824
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-21824
jvn.jp
https://jvn.jp/en/jp/JVN82749078/
support.brother.com
https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faqp00100601_000
support.brother.com
https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faq00100823_000
www.fujifilm.com
https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html
www.ricoh.com
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002
www.toshibatec.com
https://www.toshibatec.com/information/20240306_01.html
More from Multiple printers and scanners
6.1
CVE-2024-22475
Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD
