Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
15DW, HL-L6210DW, HL-L6210DWT, HL-L6217DW, HL-L5218DN, HL-L5228DW, HL-L6310DW, HL-L6410DN, HL-L6415DN, HL-L6415DN CSP, HL-L6412DW, HL-L6415DW, HL-L6415DWT, HL-L6418DW, HL-EX415DW, DCP-L5510DN, DCP-L5512DN, DCP-L5518DN, DCP-L5510DW, DCP-L5610DN, DCP-L5660DN, DCP-L5662DN, MFC-L5710DN, MFC-L5715DN, MFC-L5718DN, MFC-L5710DW, MFC-L5715DW, MFC-L5717DW, MFC-L5728DW, MFC-L5912DW, MFC-L5915DW, MFC-L6710DW, MFC-L6720DW, MFC-L6810DW, MFC-L6910DN, MFC-L6915DN, MFC-L6915DN CSP, MFC-L6912DW, MFC-L6915DW, MFC-EX910, MFC-EX915DW, MFC-L6820DW, HL-L9410CDN, HL-L9430CDN, HL-L9470CDN, HL-EX470W, MFC-L9610CDN, MFC-L9630CDN, MFC-L9635CDN, MFC-L9670CDN, NFC-EX670, MFC-EX670W, HL-L8245CDW, HL-L8240CDW, HL-L8230CDW,
W, MFC-L9610CDN, MFC-L9630CDN, MFC-L9635CDN, MFC-L9670CDN, NFC-EX670, MFC-EX670W, HL-L8245CDW, HL-L8240CDW, HL-L8230CDW, HL-L3295CDW, HL-L3288CDW, HL-L3280CDW, HL-L3240CDW, HL-L3220CWE, HL-L3220CW, HL-L3220CDW, HL-L3215CW, HL-L3228CDW, DCP-L3555CDW, DCP-L3560CDW, DCP-L3568CDW, MFC-L3720CDW, MFC-L3740CDW, MFC-L3740CDWE, MFC-L3755CDW, MFC-L3760CDW, MFC-L3765CDW, MFC-L3768CDW, MFC-L3780CDW, MFC-L8340CDW, MFC-L8390CDW, MFC-L8395CDW, HL-L3300CDW, DCP-L3515CDW, DCP-L3520CDW, DCP-L3520CDWE, DCP-L3528CDW, HL-B2100D, HL-B2100DB, HL-B2150W, HL-B2180DW, HL-B2180DWB, HL-B2181DW, HL-L2400DW, HL-L2400DWE, HL-L2405W, HL-L2420DW, HL-L2425DW, HL-L2440DW, HL-L2445DW, HL-L2447DW, HL-L2460DN, HL-L2461DN, HL-L24
00DW, HL-L2400DWE, HL-L2405W, HL-L2420DW, HL-L2425DW, HL-L2440DW, HL-L2445DW, HL-L2447DW, HL-L2460DN, HL-L2461DN, HL-L2460DW, HL-L2460DWXL, HL-L2467DW, HL-L2865DW, HL-B2158W, HL-B2188DW, DCP-L2600D, DCP-B7600DB, DCP-B7600D, DCP-L2627DWE, DCP-B7620DWB, DCP-B7620DW, DCP-L2627DW, DCP-B7640DWB, DCP-L2627DWXL, DCP-B7640DW, DCP-L2605DW, HL-L2464DW, DCP-L2622DW, DCP-L2625DW, DCP-L2620DW, HL-L2475DW, HL-L2465DW, DCP-L2640DN, DCP-L2647DW, DCP-L2640DW, MFC-L2802DN, MFC-L2827DW, MFC-L2806DW, MFC-L2805DW, MFC-L2802DW, MFC-L2800DW, MFC-L2765DW, MFC-L2760DW, MFC-B7800DN, MFC-B7811DW, MFC-B7810DWB, MFC-B7810DW, MFC-L2835DW, MFC-L2827DWXL, DCP-B7548W, DCP-B7558W, DCP-B7578DW, DCP-L2508DW, DCP-L2518DW, DCP-B
-B7810DWB, MFC-B7810DW, MFC-L2835DW, MFC-L2827DWXL, DCP-B7548W, DCP-B7558W, DCP-B7578DW, DCP-L2508DW, DCP-L2518DW, DCP-B7608W, DCP-B7628DW, DCP-B7638DN, DCP-B7648DW, DCP-L2628DW, DCP-L2548DW, DCP-L2648DW, DCP-L2600DW, FAX-L2800DW, DCP-L2680DW, DCP-L2660DW, HL-L2480DW, DCP-L2665DW, MFC-L2817DW, MFC-L2807DW, MFC-L2820DWXL, MFC-L2820DW, MFC-L2861DW, MFC-L2862DW, MFC-L2860DW, MFC-L2885DW, MFC-L2880DWXL, MFC-L2886DW, MFC-L2860DWE, MFC-L2880DW, MFC-L2900DW, MFC-L2900DWXL, DCP-B7658DW, DCP-B7650DW, MFC-L2920DW, MFC-L2922DW, MFC-L2960DW, MFC-L2980DW, HL-L1230W, HL-L1232W, HL-L1808W, HL-L1238W, DCP-L1630W, DCP-L1632W, DCP-L1638W, DCP-L1848W, HL-L2325DW, HL-L2350DW, HL-L2351DW, HL-L2352DW, HL-L2357DW,
, HL-L1238W, DCP-L1630W, DCP-L1632W, DCP-L1638W, DCP-L1848W, HL-L2325DW, HL-L2350DW, HL-L2351DW, HL-L2352DW, HL-L2357DW, HL-L2370DN, HL-L2371DN, HL-L2372DN, HL-2590DN, HL-L2370DW, HL-L2370DWXL, HL-L2375DW, HL-L2376DW, HL-B2050DN, HL-B2080DW, HL-L2385DW, HL-L2386DW, HL-2595DW, HL-L2350DWR, HL-L2370DNR, HL-L2375DWR, HL-L2395DW, MFC-L2730DW, MFC-L2732DW, MFC-L2750DW, MFC-L2750DWXL, MFC-L2751DW, MFC-L2770DW, MFC-L2771DW, MFC-L2730DWR, MFC-L2750DWR, DCP-7195DW, MFC-7895DW, MFC-L2730DN, HL-L2390DW, DCP-L2530DW, DCP-L2531DW, DCP-L2532DW, DCP-L2535DW, DCP-L2537DW, DCP-B7520DW, DCP-L2550DN, DCP-L2550DW, DCP-L2551DN, DCP-L2551DW, DCP-L2552DN, DCP-B7535DW, MFC-L2690DW, MFC-L2710DN, MFC-L2712DN, MFC-L27
L2550DN, DCP-L2550DW, DCP-L2551DN, DCP-L2551DW, DCP-L2552DN, DCP-B7535DW, MFC-L2690DW, MFC-L2710DN, MFC-L2712DN, MFC-L2710DW, MFC-L2712DW, MFC-L2713DW, MFC-L2715DW, MFC-L2716DW, MFC-L2717DW, MFC-B7715DW, DCP-L2530DWR, DCP-L2550DNR, MFC-L2710DNR, MFC-L2710DWR, FAX-L2710DN, DCP-7190DN, DCP-B7530DN, DCP-L2550DW(TWN), MFC-7890DN, MFC-B7720DN, MFC-L2715DW(for Tiwan, Koria), DCP-7090DW, DCP-7190DW, HL-L3210CW, HL-L3230CDN, HL-L3230CDW, HL-3160CDW, HL-L3270CDW, HL-3190CDW, DCP-L3510CDW, DCP-L3517CDW, HL-L3290CDW, DCP-L3551CDW, DCP-L3550CDW, DCP-9030CDN, MFC-L3710CDW, MFC-L3730CDN, MFC-9150CDN, MFC-L3735CDN, MFC-L3745CDW, MFC-L3750CDW, MFC-9350CDW, MFC-L3770CDW, HL-L6250DW, HL-5595DNH, HL-5595DN, HL
MFC-9150CDN, MFC-L3735CDN, MFC-L3745CDW, MFC-L3750CDW, MFC-9350CDW, MFC-L3770CDW, HL-L6250DW, HL-5595DNH, HL-5595DN, HL-L6250DN, HL-L6202DW, HL-L6200DW, HL-L5202DW, HL-L5200DW, HL-L5050DN, HL-5590DN, HL-L5100DN, HL-L5102DW, HL-L5100DNT, HL-L5200DWT, HL-L6200DWT, HL-L6450DW, HL-L6402DW, HL-L6400DW, HL-L6300DW, HL-L6300DWT, HL-L6400DWT, HL-L6400DWG, MFC-L6970DW, MFC-L6950DW, MFC-L6902DW, MFC-L6900DW, MFC-L6800DW, MFC-L6750DW, MFC-L6702DW, MFC-L6700DW, MFC-L5902DW, MFC-L5900DW, MFC-L5850DW, MFC-L5802DW, MFC-L5800DW, MFC-8540DN, MFC-L5755DW, MFC-L5750DW, MFC-8530DN, MFC-L5700DN, MFC-L5702DW, MFC-L5700DW, DCP-L6600DW, DCP-L5652DN, DCP-L5650DN, DCP-L5602DN, DCP-L5600DN, DCP-L5502DN, DCP-L5500DN,
N, MFC-L5702DW, MFC-L5700DW, DCP-L6600DW, DCP-L5652DN, DCP-L5650DN, DCP-L5602DN, DCP-L5600DN, DCP-L5502DN, DCP-L5500DN, MFC-L6900DWG, HL-L2305W, HL-L2315DW, HL-L2340DW, HL-L2340DWR, HL-L2360DN, HL-L2360DW, HL-L2365DW, HL-L2366DW, HL-2560DN, HL-2569DW, HL-L2360DNR, HL-L2365DWR, DCP-L2520DW, DCP-L2520DWR, DCP-L2540DN, DCP-L2540DW, DCP-L2541DW, DCP-L2540DNR, DCP-L2560DW, HL-L2380DW, DCP-L2560DWR, DCP-7180DN, DCP-7189DW, MFC-L2680W, MFC-L2685DW, MFC-L2700DW, MFC-L2700DN, MFC-L2700DWR, MFC-L2700DW(ASA), MFC-L2701DW, MFC-L2703DW, MFC-L2705DW, MFC-L2707DW, MFC-L2720DW, MFC-L2720DWR, MFC-L2740DW, MFC-L2740DWR, MFC-7880DN, MFC-7889DW, FAX-L2700DN, MFC-L2720DN, HL-1210W, HL-1210WE, HL-1210WR, HL-1211W
R, MFC-L2740DW, MFC-L2740DWR, MFC-7880DN, MFC-7889DW, FAX-L2700DN, MFC-L2720DN, HL-1210W, HL-1210WE, HL-1210WR, HL-1211W, HL-1212W, HL-1212WE, HL-1222WE, HL-1223WE, HL-1223WR, HL-1212WR, HL-1218W, DCP-1610W, DCP-1610WE, DCP-1610WR, DCP-1612W, DCP-1622WE, DCP-1623WE, DCP-1623WR, DCP-1612WE, DCP-1612WR, DCP-1615NW, DCP-1616NW, DCP-1617NW, DCP-1618W, MFC-1910W, MFC-1910WE, MFC-1912WR, MFC-1911W, MFC-1915W, MFC-1911NW, MFC-1916NW, MFC-1919NW, DCP-T830DW, DCP-T835DW, MFC-T930DW, MFC-T935DW, DCP-T530DW, DCP-T535DW, DCP-T536DW, DCP-T730DW, DCP-T735DW, DCP-T230, DCP-T236, DCP-T238, DCP-T435W, DCP-T430W, DCP-T436W, DCP-T439W, MFC-J5340DW, MFC-J5345DW, MFC-J2340DW, MFC-J5340DWE, MFC-J5740DW, MFC-J2740
DCP-T435W, DCP-T430W, DCP-T436W, DCP-T439W, MFC-J5340DW, MFC-J5345DW, MFC-J2340DW, MFC-J5340DWE, MFC-J5740DW, MFC-J2740DW, MFC-J6540DW, MFC-J6740DW, MFC-J3540DW, MFC-J7100CDW, MFC-J6540DWE, MFC-J6940DW, MFC-J3940DW, MFC-J7300CDW, MFC-J5855DW, MFC-J5855DW XL, MFC-J5800CDW, MFC-J5955DW, MFC-J6555DW, MFC-J6555DW XL, MFC-J6955DW, MFC-J6957DW, MFC-J7500CDW, MFC-J7600CDW, HL-J6010DW, HL-J7010CDW, MFC-J6959DW, MFC-J7700CDW, HL-JF1, DCP-T520W, DCP-T525W, DCP-T720DW, DCP-T725DW, DCP-T820DW, DCP-T825DW, MFC-T920DW, MFC-T925DW, DCP-T220, DCP-T225, DCP-T226, DCP-T420W, DCP-T425W, DCP-T426W, DCP-T428W, DCP-C421W, MFC-J1205W(XL), MFC-J1215W, DCP-J1200W(XL), DCP-J1200N, DCP-J1200WE, MFC-J4335DW(XL), MFC-J
T426W, DCP-T428W, DCP-C421W, MFC-J1205W(XL), MFC-J1215W, DCP-J1200W(XL), DCP-J1200N, DCP-J1200WE, MFC-J4335DW(XL), MFC-J4340DW(XL), MFC-J4345DW XL, MFC-4340DWE, MFC-J4535DW(XL), MFC-J4540DW(XL), MFC-J4440DW, DCP-J4140N, MFC-J4440N, MFC-J4540N, MFC-J4940DN, SP-1, SP-1 (for Japan), MFC-J1010DW, MFC-J1012DW, DCP-J1050DW, MFC-J1170DW, DCP-J1140DW, DCP-J526N, DCP-J914N, MFC-J926N-WB, MFC-J904N, MFC-J739DN, MFC-J739DWN, MFC-J939DN, MFC-J939DWN, DCP-J1800N, DCP-J1700DW, DCP-J1800DW, MFC-J1800DW, DCP-J1203N, DCP-C1210N, DCP-J4143N, MFC-J4443N, DCP-J4543N, DCP-J528N, DCP-J915N, DCP-J928N-WB, MFC-J905N, MFC-J815DW XL, MFC-J805DW, MFC-J805DW XL, DCP-J1100DW, MFC-J995DW, MFC-J995DW XL, MFC-J1300DW, DCP-
J928N-WB, MFC-J905N, MFC-J815DW XL, MFC-J805DW, MFC-J805DW XL, DCP-J1100DW, MFC-J995DW, MFC-J995DW XL, MFC-J1300DW, DCP-J988N, MFC-J1500N, MFC-J1605DN, MFC-J5845DW(XL), MFC-J5945DW, MFC-J6945DW, MFC-J6947DW, HL-J6000DW, HL-J6100DW, MFC-J6997CDW, MFC-J6999CDW, HL-J6000CDW, MFC-T4500DW, HL-T4000DW, MFC-J5330DW, MFC-J5335DW, MFC-J2330DW, MFC-J5730DW, MFC-J5830DW, MFC-J5930DW, MFC-J2730DW, MFC-J6530DW, MFC-J6730DW, MFC-J3530DW, MFC-J6930DW, MFC-J6935DW, MFC-J3930DW, MFC-J6535DW, MFC-J6580CDW, MFC-J6980CDW, MFC-J6995CDW, MFC-J5630CDW, MFC-J6583CDW, MFC-J6983CDW, DCP-T510W, DCP-T510W(for China), DCP-T710W, DCP-T710W(for China), MFC-T810W, MFC-T810W(for China), MFC-T910DW, DCP-J572DW, MFC-J491DW, M
510W(for China), DCP-T710W, DCP-T710W(for China), MFC-T810W, MFC-T810W(for China), MFC-T910DW, DCP-J572DW, MFC-J491DW, MFC-J497DW, DCP-J772DW, DCP-J774DW, MFC-J890DW, MFC-J895DW, MFC-J690DW, DCP-J572N, DCP-J577N, DCP-J582N, DCP-J972N, DCP-J973N-W/B, DCP-J978N-W/B, DCP-J981N, DCP-J982N-W/B, MFC-J893N, MFC-J898N, NFC-J903N, MFC-J738DN, MFC-J738DWN, MFC-J998DN, MFC-J998DWN, DCP-J587N, DCP-J987N-W, DCP-J987N-B, ADS-2400N, ADS-3000N, ADS-2800W, ADS-3600W, ADS-2700W, ADS-1250W, ADS-1700W, DS-740D, DS/MDS-940DW, ADS-3300W, ADS-4500W, ADS-2700We, ADS-4300N, ADS-4700W, ADS-4900W, ADS-1350W, ADS-1800W, DocuPrint P360 dw, DocuPrint P378 d, DocuPrint P375 d, DocuPrint P375 dw, DocuPrint P378 dw, DocuPri
S-1350W, ADS-1800W, DocuPrint P360 dw, DocuPrint P378 d, DocuPrint P375 d, DocuPrint P375 dw, DocuPrint P378 dw, DocuPrint P385 dw, DocuPrint P388 dw, DocuPrint M378 d, DocuPrint M375 df, DocuPrint M378 df, DocuPrint M375 z, DocuPrint M385 z, DocuPrint P235 d, DocuPrint P275 dw, DocuPrint P285 dw, DocuPrint P288 dw, DocuPrint M235 dw, DocuPrint M235 z, DocuPrint M275 z, DocuPrint M285 z, DocuPrint M288 dw, DocuPrint M288 z, DocuPrint P225 d, DocuPrint P268 d, DocuPrint P268 dw, DocuPrint P265 dw, DocuPrint P260 dw, DocuPrint M268 dw, DocuPrint M268 z, DocuPrint M225 dw, DocuPrint M225 z, DocuPrint M265 z, DocuPrint M260 z, DocuPrint P118 w, DocuPrint P115 w, DocuPrint M118 w, DocuPrint M118
uPrint M225 z, DocuPrint M265 z, DocuPrint M260 z, DocuPrint P118 w, DocuPrint P115 w, DocuPrint M118 w, DocuPrint M118 z, DocuPrint M115 w, DocuPrint M115 fw, DocuPrint M115 z, SP 230DNw, P 201W, M 340W, SP 230SFNw, M 340FW, e-STUDIO301DN, e-STUDIO302DNF, bizhub 5020i, bizhub 5000i, bizhub 4020i, bizhub 4000i, bizhub 3080MF, bizhub 3000MF Problem Types: CWE-1286 Description: An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. Additional Analy
he device will reboot, after which the attacker can reissue the command to repeatedly crash the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 - https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 - https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html - https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007 - https://www.toshibatec.com/information/20250625_02.html - https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf - https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vu
global-en/security/advisory/pdf/km-2025-0001.pdf - https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed - https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf - https://github.com/sfewer-r7/BrotherVulnerabilities
CVE ID: CVE-2024-51984 State: PUBLISHED Published: 2025-06-25T07:28:17.332Z Last Updated: 2025-06-25T14:17:15.174Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Brother Industries, Ltd, FUJIFILM Business Innovation, RICOH, Toshiba Tec, Konica Minolta, Inc. Products: HL-L8260CDN, HL-L8260CDW, HL-L8360CDW, HL-L8360CDWT, HL-L9310CDW, DCP-L8410CDW, MFC-L8610CDW, MFC-L8690CDW, MFC-L8900CDW, MFC-L9570CDW, MFC-L9577CDW, MFC-L8610CDW(for Japan), MFC-L9570CDW(for Japan), HL-L5210DN, HL-L5212DN, HL-L5215DN, HL-L5210DW, HL-L5210DWT, HL-L5212DW, HL-L5215DW, HL-L6210DW, HL-L6210DWT, HL-L6217DW, HL-L5218DN, HL-L5228DW, HL-L6310DW, HL-L6410DN, HL-L6415DN, HL-L6415DN CSP,
-T510W(for China), DCP-T710W, DCP-T710W(for China), MFC-T810W, MFC-T810W(for China), MFC-T910DW, DCP-J572DW, MFC-J491DW, MFC-J497DW, DCP-J772DW, DCP-J774DW, MFC-J890DW, MFC-J895DW, MFC-J690DW, DCP-J572N, DCP-J577N, DCP-J582N, DCP-J972N, DCP-J973N-W/B, DCP-J978N-W/B, DCP-J981N, DCP-J982N-W/B, MFC-J893N, MFC-J898N, NFC-J903N, MFC-J738DN, MFC-J738DWN, MFC-J998DN, MFC-J998DWN, DCP-J587N, DCP-J987N-W, DCP-J987N-B, ADS-2400N, ADS-3000N, ADS-2800W, ADS-3600W, ADS-2700W, ADS-1700W, ADS-3300W, ADS-4500W, ADS-2700We, ADS-4300N, ADS-4700W, ADS-4900W, ADS-1800W, TD-2310D, TD-2320D, TD-2320DF, TD-2350D, TD-2350DF, TD-2320DSA, TD-2350DSA, TD-2350DFSA, PT-P900Wc, QL-1110NWBc, QL-810Wc, QL-820NWBc, TD-2125N
2320DF, TD-2350D, TD-2350DF, TD-2320DSA, TD-2350DSA, TD-2350DFSA, PT-P900Wc, QL-1110NWBc, QL-810Wc, QL-820NWBc, TD-2125N, TD-2135N, PJ-883, RJ-3250WB, RJ-4250WB, TD-4420DN, TD-4520DN, TD-4550DNWB, TD-4420DNZ, QL-810W, QL-820NWB, RJ-2150, RJ-2050, RJ-2140, TD-2120N, TD-2130N, DocuPrint P360 dw, DocuPrint P378 d, DocuPrint P375 d, DocuPrint P375 dw, DocuPrint P378 dw, DocuPrint P385 dw, DocuPrint P388 dw, DocuPrint M378 d, DocuPrint M375 df, DocuPrint M378 df, DocuPrint M375 z, DocuPrint M385 z, DocuPrint P235 d, DocuPrint P275 dw, DocuPrint P285 dw, DocuPrint P288 dw, DocuPrint M235 dw, DocuPrint M235 z, DocuPrint M275 z, DocuPrint M285 z, DocuPrint M288 dw, DocuPrint M288 z, DocuPrint P225 d
int M235 dw, DocuPrint M235 z, DocuPrint M275 z, DocuPrint M285 z, DocuPrint M288 dw, DocuPrint M288 z, DocuPrint P225 d, DocuPrint P268 d, DocuPrint P268 dw, DocuPrint P265 dw, DocuPrint P260 dw, DocuPrint M268 dw, DocuPrint M268 z, DocuPrint M225 dw, DocuPrint M225 z, DocuPrint M265 z, DocuPrint M260 z, DocuPrint P118 w, DocuPrint P115 w, DocuPrint M118 w, DocuPrint M118 z, DocuPrint M115 w, DocuPrint M115 fw, DocuPrint M115 z, SP 230DNw, P 201W, M 340W, SP 230SFNw, M 340FW, e-STUDIO301DN, e-STUDIO302DNF, bizhub 5020i, bizhub 5000i, bizhub 4020i, bizhub 4000i, bizhub 3080MF, bizhub 3000MF Problem Types: CWE-522 Description: An authenticated attacker can reconfigure the target device to use
MF, bizhub 3000MF Problem Types: CWE-522 Description: An authenticated attacker can reconfigure the target device to use an external service (such as LDAP or FTP) controlled by the attacker. If an existing password is present for an external service, the attacker can force the target device to authenticate to an attacker controlled device using the existing credentials for that external service. In the case of an external LDAP or FTP service, this will disclose the plaintext password for that external service to the attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 - https://support.brother.c
t: References: - https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 - https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 - https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000 - https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html - https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007 - https://www.toshibatec.com/information/20250625_02.html - https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf - https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed - https://assets.contentstack.io/v3/assets/blte4f02
om/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed - https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf - https://github.com/sfewer-r7/BrotherVulnerabilities
CVE ID: CVE-2024-51987 State: PUBLISHED Published: 2024-11-07T23:36:16.989Z Last Updated: 2024-11-08T15:57:51.304Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: DuendeSoftware Products: Duende.AccessTokenManagement Problem Types: CWE-270 Description: Duende.AccessTokenManagement.OpenIdConnect is a set of .NET libraries that manage OAuth and OpenId Connect access tokens. HTTP Clients created by `AddUserAccessTokenHttpClient` may use a different user's access token after a token refresh occurs. This occurs because a refreshed token will be captured in pooled `HttpClient` instances, which may be used by a different user. Instead of using `AddUserAccessTokenHt
captured in pooled `HttpClient` instances, which may be used by a different user. Instead of using `AddUserAccessTokenHttpClient` to create an `HttpClient` that automatically adds a managed token to outgoing requests, you can use the `HttpConext.GetUserAccessTokenAsync` extension method or the `IUserTokenManagementService.GetAccessTokenAsync` method. This issue is fixed in Duende.AccessTokenManagement.OpenIdConnect 3.0.1. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/DuendeSoftware/Duende.AccessTokenManagement/security/advisories/GHSA-7mr7-4f54-vcx5
CVE ID: CVE-2024-51988 State: PUBLISHED Published: 2024-11-06T19:15:17.391Z Last Updated: 2024-11-06T19:53:22.685Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: rabbitmq Products: rabbitmq-server Problem Types: CWE-284 Description: RabbitMQ is a feature rich, multi-protocol messaging and streaming broker. In affected versions queue deletion via the HTTP API was not verifying the `configure` permission of the user. Users who had all of the following: 1. Valid credentials, 2. Some permissions for the target virtual host & 3. HTTP API access. could delete queues it had no (deletion) permissions for. This issue has been addressed in version 3.12.11 of the open
. could delete queues it had no (deletion) permissions for. This issue has been addressed in version 3.12.11 of the open source rabbitMQ release and in versions 1.5.2, 3.13.0, and 4.0.0 of the tanzu release. Users are advised to upgrade. Users unable to upgrade may disable management plugin and use, for example, Prometheus and Grafana for monitoring. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-pj33-75x5-32j4 - https://www.rabbitmq.com/docs/prometheus
CVE ID: CVE-2024-51989 State: PUBLISHED Published: 2024-11-07T17:50:41.881Z Last Updated: 2024-11-07T19:09:41.347Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N) Vendors: pglombardo Products: PasswordPusher Problem Types: CWE-79 Description: Password Pusher is an open source application to communicate sensitive information over the web. A cross-site scripting (XSS) vulnerability was identified in the PasswordPusher application, affecting versions `v1.41.1` through and including `v.1.48.0`. The issue arises from an un-sanitized parameter which could allow attackers to inject malicious JavaScript into the application. Users who self-host and have the login system enable
llow attackers to inject malicious JavaScript into the application. Users who self-host and have the login system enabled are affected. Exploitation of this vulnerability could expose user data, access to user sessions or take unintended actions on behalf of users. To exploit this vulnerability, an attacker would need to convince a user to click a malicious account confirmation link. It is highly recommended to update to version `v1.48.1` or later to mitigate this risk. There are no known workarounds for this vulnerability. ### Solution Update to version `v1.48.1` or later where input sanitization has been applied to the account confirmation process. If updating is not immediately possible,
where input sanitization has been applied to the account confirmation process. If updating is not immediately possible, Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pglombardo/PasswordPusher/security/advisories/GHSA-5chg-cq29-gfqf
CVE ID: CVE-2024-51990 State: PUBLISHED Published: 2024-11-07T00:15:17.443Z Last Updated: 2024-11-07T16:57:48.274Z Vendors: martinvonz Products: jj Problem Types: CWE-22 Description: jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause `jj` to write files outside the clone. This issue has been addressed in version 0.23.0. Users are advised to upgrade. Users unable to upgrade should avoid cloning repos from unknown sources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/martinvonz/jj/security/advisories/GHSA-88h5-6w7m-5w56
CVE ID: CVE-2024-51991 State: PUBLISHED Published: 2025-05-05T17:04:53.615Z Last Updated: 2025-05-05T18:06:18.685Z Vendors: octobercms Products: october Problem Types: CWE-434 Description: October is a Content Management System (CMS) and web platform. A vulnerability in versions prior to 3.7.5 affects authenticated administrators with sites that have the `media.clean_vectors` configuration enabled. This configuration will sanitize SVG files uploaded using the media manager. This vulnerability allows an authenticated user to bypass this protection by uploading it with a permitted extension (for example, .jpg or .png) and later modifying it to the .svg extension. This vulnerability assumes a t
itted extension (for example, .jpg or .png) and later modifying it to the .svg extension. This vulnerability assumes a trusted user will attack another trusted user and cannot be actively exploited without access to the administration panel and interaction from the other user. This issue has been patched in v3.7.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/octobercms/october/security/advisories/GHSA-96hh-8hx5-cpw7
CVE ID: CVE-2024-51992 State: PUBLISHED Published: 2024-11-11T19:17:56.081Z Last Updated: 2024-11-12T14:45:07.496Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N) Vendors: orchidsoftware Products: platform Problem Types: CWE-749 Description: Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards. This vulnerability is a method exposure issue (CWE-749: Exposed Dangerous Method or Function) in the Orchid Platform’s asynchronous modal functionality, affecting users of Orchid Platform version 8 through 14.42.x. Attackers could exploit this vulnerability to call arbitrary methods within the
chid Platform version 8 through 14.42.x. Attackers could exploit this vulnerability to call arbitrary methods within the `Screen` class, leading to potential brute force of database tables, validation checks against user credentials, and disclosure of the server’s real IP address. The issue has been patched in the latest release, version 14.43.0, released on November 6, 2024. Users should upgrade to version 14.43.0 or later to address this vulnerability. If upgrading to version 14.43.0 is not immediately possible, users can mitigate the vulnerability by implementing middleware to intercept and validate requests to asynchronous modal endpoints, allowing only approved methods and parameters. A
are to intercept and validate requests to asynchronous modal endpoints, allowing only approved methods and parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/orchidsoftware/platform/security/advisories/GHSA-cm46-gqf4-mv4f