GCVE - cpe:2.3:a:brother_industries,_ltd:td-2130n:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:brother_industries,_ltd:td-2130n:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Brother Industries, Ltd (`43a935b6-f338-5a5c-a36f-949e8fabcb08`)
Product	Td 2130N (`fa184c40-ff1c-59e8-b710-2e0be23a1eb9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-51984`	vulnerable	2026-06-08 06:52:14.213553	Authenticated disclosure of external service passwords via pass-back attack affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. MEDIUM (6.8) An authenticated attacker can reconfigure the target device to use an external service (such as LDAP or FTP) controlled by the attacker. If an existing password is present for an external service, the attacker can force the target device to authenticate to an attacker controlled device using the existing credentials for that external service. In the case of an external LDAP or FTP service, this will disclose the plaintext password for that external service to the attacker. Published: 2025-06-25T07:28:17.332Z Updated: 2026-04-07T05:01:43.148Z Open on db.gcve.eu Reference links https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000 https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-51979`	vulnerable	2026-06-08 06:52:13.808808	Authenticated stack based buffer overflow affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Konica Minolta, Inc. HIGH (7.2) An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631). The malformed request will contain an empty Origin header value and a malformed Referer header value. The Referer header value will trigger a stack based buffer overflow when the host value in the Referer header is processed and is greater than 64 bytes in length. Published: 2025-06-25T07:20:29.048Z Updated: 2026-04-07T05:42:17.202Z Open on db.gcve.eu Reference links https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000 https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-51978`	vulnerable	2026-06-08 06:52:13.689529	Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc. CRITICAL (9.8) An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request. Published: 2025-06-25T07:17:32.423Z Updated: 2026-03-30T18:04:21.961Z Open on db.gcve.eu Reference links https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf https://github.com/rapid7/metasploit-framework/pull/20349 https://github.com/sfewer-r7/BrotherVulnerabilities https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51978.yaml	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-51977`	vulnerable	2026-06-08 06:52:13.382031	Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. MEDIUM (5.3) An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mnt_info.csv can be accessed via a GET request and no authentication is required. The returned result is a comma separated value (CSV) table of information. The leaked information includes the device’s model, firmware version, IP address, and serial number. Published: 2025-06-25T07:15:16.800Z Updated: 2026-03-30T15:47:10.059Z Open on db.gcve.eu Reference links https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf https://github.com/sfewer-r7/BrotherVulnerabilities https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51977.yaml https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.