Approved changes feed: RSS · Atom

cpe:2.3:a:brother_industries,_ltd:ds-940dw:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBrother Industries, Ltd (43a935b6-f338-5a5c-a36f-949e8fabcb08)
ProductDs 940Dw (b1a4bb5e-f433-501d-966b-bc53a5cb7f78)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-51983 vulnerable 2026-06-08 06:52:14.147441 Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.
HIGH (7.5)
An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device.
Published: 2025-06-25T07:26:56.570Z
Updated: 2026-04-07T05:11:27.395Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51978 vulnerable 2026-06-08 06:52:13.457619 Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.
CRITICAL (9.8)
An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request.
Published: 2025-06-25T07:17:32.423Z
Updated: 2026-03-30T18:04:21.961Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.