01 Record

CVE-2025-8452

Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc.

MediumPUBLISHEDCNA: AHA

CNA base score4.3 CVSS v3.xCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

View raw JSON

02 Description

Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc.

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.25% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 16.9% of scored records. A rank, not a probability.

NVD base score

4.3 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD analysis status

Deferred. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-08-12 15:23Z1 YR AGO

Last updated

2025-10-08 13:39Z1 YR AGO

Reserved

2025-08-01

Assigning CNA

AHA

Record state

PUBLISHED

Severity

Medium (CVSS 4.3)

CNA CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses

CWE-538Insertion of Sensitive Information into Externally-Accessible File or DirectoryBase

Data version

5.1

Document digest

49170e60d58a935ce79be1cdea1345cc32f6559e8a71ecfd3e61382a7f6fabaa

05 Affected products

VendorProductVersionsPlatforms

Brother Industries, LtdDCP-L8410CDW0 to ZK—

Brother Industries, LtdMFC-L8610CDW0 to ZK—

Brother Industries, LtdMFC-L8690CDW0 to ZK—

Brother Industries, LtdMFC-L8900CDW0 to ZM—

Brother Industries, LtdMFC-L9570CDW0 to ZM—

Brother Industries, LtdMFC-L9577CDW0 to ZM—

Brother Industries, LtdMFC-L8610CDW(for Japan)0 to ZD—

Brother Industries, LtdMFC-L9570CDW(for Japan)0 to ZD—

Brother Industries, LtdHL-L5218DN0 to 1.12(F)—

Brother Industries, LtdHL-L5228DW0 to 1.12(F)—

Brother Industries, LtdDCP-L5510DN0 to 1.18(J)—

Brother Industries, LtdDCP-L5512DN0 to 1.18(J)—

Brother Industries, LtdDCP-L5518DN0 to 1.18(J)—

Brother Industries, LtdDCP-L5510DW0 to 1.18(J)—

Brother Industries, LtdDCP-L5610DN0 to 1.18(J)—

Brother Industries, LtdDCP-L5660DN0 to 1.18(J)—

Brother Industries, LtdDCP-L5662DN0 to 1.18(J)—

Brother Industries, LtdMFC-L5710DN0 to 1.18(J)—

Brother Industries, LtdMFC-L5715DN0 to 1.18(J)—

Brother Industries, LtdMFC-L5718DN0 to 1.18(J)—

Brother Industries, LtdMFC-L5710DW0 to 1.12(H)—

Brother Industries, LtdMFC-L5715DW0 to 1.18(J)—

Brother Industries, LtdMFC-L5717DW0 to 1.18(J)—

Brother Industries, LtdMFC-L5728DW0 to 1.18(J)—

Brother Industries, LtdMFC-L5912DW0 to 1.18(J)—

Brother Industries, LtdMFC-L5915DW0 to 1.18(J)—

Brother Industries, LtdMFC-L6710DW0 to 1.18(J)—

Brother Industries, LtdMFC-L6720DW0 to 1.18(J)—

Brother Industries, LtdMFC-L6810DW0 to 1.18(J)—

Brother Industries, LtdMFC-L6910DN0 to 1.18(J)—

Brother Industries, LtdMFC-L6915DN0 to 1.18(J)—

Brother Industries, LtdMFC-L6915DN CSP0 to 1.18(J)—

Brother Industries, LtdMFC-L6912DW0 to 1.18(J)—

Brother Industries, LtdMFC-L6915DW0 to 1.18(J)—

Brother Industries, LtdMFC-EX9100 to 1.18(J)—

Brother Industries, LtdMFC-EX915DW0 to 1.18(J)—

Brother Industries, LtdMFC-L6820DW0 to 1.15(H)—

Brother Industries, LtdMFC-L9610CDN0 to 1.22(S)—

Brother Industries, LtdMFC-L9630CDN0 to 1.22(S)—

Brother Industries, LtdMFC-L9635CDN0 to 1.22(S)—

Brother Industries, LtdMFC-L9670CDN0 to 1.22(S)—

Brother Industries, LtdNFC-EX6700 to 1.22(S)—

Brother Industries, LtdMFC-EX670W0 to 1.22(S)—

Brother Industries, LtdDCP-L3555CDW0 to 1.19(M)—

Brother Industries, LtdDCP-L3560CDW0 to 1.19(M)—

Brother Industries, LtdDCP-L3568CDW0 to 1.19(M)—

Brother Industries, LtdMFC-L3720CDW0 to 1.19(M)—

Brother Industries, LtdMFC-L3740CDW0 to 1.19(M)—

Brother Industries, LtdMFC-L3740CDWE0 to 1.19(M)—

Brother Industries, LtdMFC-L3755CDW0 to 1.19(M)—

Brother Industries, LtdMFC-L3760CDW0 to 1.19(M)—

Brother Industries, LtdMFC-L3765CDW0 to 1.19(M)—

Brother Industries, LtdMFC-L3768CDW0 to 1.19(M)—

Brother Industries, LtdMFC-L3780CDW0 to 1.12(J)—

Brother Industries, LtdMFC-L8340CDW0 to 1.19(M)—

Brother Industries, LtdMFC-L8390CDW0 to 1.19(M)—

Brother Industries, LtdMFC-L8395CDW0 to 1.19(M)—

Brother Industries, LtdHL-L3300CDW0 to 1.16(L)—

Brother Industries, LtdDCP-L3515CDW0 to 1.16(L)—

Brother Industries, LtdDCP-L3520CDW0 to 1.16(L)—

140 further entries not shown. The complete list is in the raw JSON document.

06 References

support.brother.comhttps://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00100851_000vendor-advisory
www.rapid7.comhttps://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed/third-party-advisoryrelated
help.runzero.comhttps://help.runzero.com/docs/installing-an-explorer/exploit
takeonme.orghttps://takeonme.org/gcves/GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001technical-descriptionthird-party-advisory
www.cve.orghttps://www.cve.org/CVERecord?id=CVE-2024-51977related