01 Record

CVE-2024-51982

Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh.

HighPUBLISHEDCNA: rapid7

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh.

03 Exploitation and scoring

Exploitation

Public exploit code exists. CISA's assessment records a public proof of concept. That is not a report of exploitation in the wild.

SSVC decision

ExploitationpocPublic proof-of-concept exploit code exists. Not a report of exploitation in the wild.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

10.74% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 95.6% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-06-25 07:25Z1 YR AGO

Last updated

2026-04-02 14:05Z7 MO AGO

Reserved

2024-11-04

Assigning CNA

rapid7

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-1286Improper Validation of Syntactic Correctness of InputBase

Data version

5.2

Document digest

4d91cf247e7fd50182671b24647159a3958ab126c0ff2aa30272b70f1f50f325

05 Affected products

VendorProductVersionsPlatforms

Brother Industries, LtdHL-L8260CDN0 to 1.65(ZH)—

Brother Industries, LtdHL-L8260CDW0 to 1.65(ZH)—

Brother Industries, LtdHL-L8360CDW0 to 1.68(ZG)—

Brother Industries, LtdHL-L8360CDWT0 to 1.68(ZG)—

Brother Industries, LtdHL-L9310CDW0 to 1.68(ZG)—

Brother Industries, LtdDCP-L8410CDW0 to ZK—

Brother Industries, LtdMFC-L8610CDW0 to ZK—

Brother Industries, LtdMFC-L8690CDW0 to ZK—

Brother Industries, LtdMFC-L8900CDW0 to ZM—

Brother Industries, LtdMFC-L9570CDW0 to ZM—

Brother Industries, LtdMFC-L9577CDW0 to ZM—

Brother Industries, LtdHL-L2325DW0 to 1.74(ZE)—

Brother Industries, LtdHL-L2350DW0 to 1.74(ZE)—

Brother Industries, LtdHL-L2351DW0 to 1.74(ZE)—

Brother Industries, LtdHL-L2352DW0 to 1.74(ZE)—

Brother Industries, LtdHL-L2357DW0 to 1.74(ZE)—

Brother Industries, LtdHL-L2370DN0 to 1.74(ZE)—

Brother Industries, LtdHL-L2371DN0 to 1.74(ZE)—

Brother Industries, LtdHL-L2372DN0 to 1.74(ZE)—

Brother Industries, LtdHL-2590DN0 to 1.74(ZE)—

Brother Industries, LtdHL-L2370DW0 to 1.74(ZE)—

Brother Industries, LtdHL-L2370DWXL0 to 1.74(ZE)—

Brother Industries, LtdHL-L2375DW0 to 1.74(ZE)—

Brother Industries, LtdHL-L2376DW0 to 1.74(ZE)—

Brother Industries, LtdHL-B2050DN0 to 1.74(ZE)—

Brother Industries, LtdHL-B2080DW0 to 1.74(ZE)—

Brother Industries, LtdHL-L2385DW0 to 1.74(ZE)—

Brother Industries, LtdHL-L2386DW0 to 1.74(ZE)—

Brother Industries, LtdHL-2595DW0 to 1.74(ZE)—

Brother Industries, LtdHL-L2350DWR0 to 1.74(ZE)—

Brother Industries, LtdHL-L2370DNR0 to 1.74(ZE)—

Brother Industries, LtdHL-L2375DWR0 to 1.74(ZE)—

Brother Industries, LtdHL-L2395DW0 to ZC—

Brother Industries, LtdMFC-L2730DW0 to ZC—

Brother Industries, LtdMFC-L2732DW0 to ZC—

Brother Industries, LtdMFC-L2750DWA to ZC—

Brother Industries, LtdMFC-L2750DWXL0 to ZC—

Brother Industries, LtdMFC-L2751DW0 to ZC—

Brother Industries, LtdMFC-L2770DW0 to ZC—

Brother Industries, LtdMFC-L2771DW0 to ZC—

Brother Industries, LtdMFC-L2730DWR0 to ZC—

Brother Industries, LtdMFC-L2750DWR0 to ZC—

Brother Industries, LtdDCP-7195DW0 to R—

Brother Industries, LtdMFC-7895DW0 to R—

Brother Industries, LtdMFC-L2730DN0 to R—

Brother Industries, LtdHL-L2390DW0 to ZC—

Brother Industries, LtdDCP-L2530DW0 to ZC—

Brother Industries, LtdDCP-L2531DW0 to ZC—

Brother Industries, LtdDCP-L2532DW0 to ZC—

Brother Industries, LtdDCP-L2535DWA to ZC—

Brother Industries, LtdDCP-L2537DW0 to ZC—

Brother Industries, LtdDCP-B7520DW0 to V—

Brother Industries, LtdDCP-L2550DN0 to ZC—

Brother Industries, LtdDCP-L2550DWA to ZC—

Brother Industries, LtdDCP-L2551DN0 to ZC—

Brother Industries, LtdDCP-L2551DW0 to ZC—

Brother Industries, LtdDCP-L2552DN0 to ZC—

Brother Industries, LtdDCP-B7535DW0 to V—

Brother Industries, LtdMFC-L2690DW0 to ZC—

Brother Industries, LtdMFC-L2710DN0 to ZC—

140 further entries not shown. The complete list is in the raw JSON document.

06 References

support.brother.comhttps://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000vendor-advisory
www.fujifilm.comhttps://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.htmlvendor-advisory
www.ricoh.comhttps://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007vendor-advisory
www.rapid7.comhttps://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixedthird-party-advisory
assets.contentstack.iohttps://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdftechnical-description
github.comhttps://github.com/sfewer-r7/BrotherVulnerabilitiesexploit