CVE-2024-51978

CRITICAL EXPLOITED NUCLEI

Unknown Device - Info Disclosure

Title source: llm

Description

An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request.

Exploits (1)

github WORKING POC 40 stars
by iSee857 · pythonpoc
https://github.com/iSee857/CVE-PoC/tree/main/BrotherPrinter-CVE-2024-51978-defaultPasswd.py

Nuclei Templates (1)

Brother Printers – Authentication Bypass via Default Admin Password
CRITICALby iamnoooob,pdresearch,MathematicianGoat
FOFA: app="brother-Printer"

References (13)

Scores

CVSS v3 9.8
EPSS 0.5360
EPSS Percentile 98.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2025-08-06
CWE
CWE-1391
Status published
Products (50)
Brother Industries, Ltd/ADS-1250W < R(3.75)
Brother Industries, Ltd/ADS-1350W < C(1.06)
Brother Industries, Ltd/ADS-1700W < R(3.75)
Brother Industries, Ltd/ADS-1800W < C(1.06)
Brother Industries, Ltd/ADS-2400N < T
Brother Industries, Ltd/ADS-2700W < M(4.28)
Brother Industries, Ltd/ADS-2700We < P(2.28)
Brother Industries, Ltd/ADS-2800W < T
Brother Industries, Ltd/ADS-3000N < T
Brother Industries, Ltd/ADS-3300W < P(2.28)
... and 40 more
Published Jun 25, 2025
Tracked Since Feb 18, 2026