GCVE - cpe:2.3:a:brother_industries,_ltd:ads-3300w:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:brother_industries,_ltd:ads-3300w:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Brother Industries, Ltd (`43a935b6-f338-5a5c-a36f-949e8fabcb08`)
Product	Ads 3300W (`0c9710b6-d905-54f8-9435-14a2a43d7464`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-8452`	vulnerable	2026-06-08 07:45:20.580895	Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc. MEDIUM (4.3) By using the "uscan" protocol provided by the eSCL specification, an attacker can discover the serial number of multi-function printers that implement the Brother-provided firmware. This serial number can, in turn, can be leveraged by the flaw described by CVE-2024-51978 to calculate the default administrator password. This flaw is similar to CVE-2024-51977, with the only difference being the protocol by which an attacker can use to learn the remote device's serial number. The eSCL/uscan vector is typically only exposed on the local network. Any discovery service that implements the eSCL specification can be used to exploit this vulnerability, and one such implementation is the runZero Explorer. Changing the default administrator password will render this vulnerability virtually worthless, since the calculated default administrator password would no longer be the correct password. Published: 2025-08-12T15:23:00.577Z Updated: 2025-10-08T13:39:35.427Z Open on db.gcve.eu Reference links https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00100851_000 https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed/ https://help.runzero.com/docs/installing-an-explorer/ https://takeonme.org/gcves/GCVE-1337-2025-00000000000000000000000000000000000000000000000001011111011111010111111001000000000000000000000000000000000000000000000000000000001 https://www.cve.org/CVERecord?id=CVE-2024-51977	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-51984`	vulnerable	2026-06-08 06:52:14.212344	Authenticated disclosure of external service passwords via pass-back attack affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. MEDIUM (6.8) An authenticated attacker can reconfigure the target device to use an external service (such as LDAP or FTP) controlled by the attacker. If an existing password is present for an external service, the attacker can force the target device to authenticate to an attacker controlled device using the existing credentials for that external service. In the case of an external LDAP or FTP service, this will disclose the plaintext password for that external service to the attacker. Published: 2025-06-25T07:28:17.332Z Updated: 2026-04-07T05:01:43.148Z Open on db.gcve.eu Reference links https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000 https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-51983`	vulnerable	2026-06-08 06:52:14.133914	Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. HIGH (7.5) An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. Published: 2025-06-25T07:26:56.570Z Updated: 2026-04-07T05:11:27.395Z Open on db.gcve.eu Reference links https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007 https://www.toshibatec.com/information/20250625_02.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-51978`	vulnerable	2026-06-08 06:52:13.673954	Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc. CRITICAL (9.8) An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request. Published: 2025-06-25T07:17:32.423Z Updated: 2026-03-30T18:04:21.961Z Open on db.gcve.eu Reference links https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf https://github.com/rapid7/metasploit-framework/pull/20349 https://github.com/sfewer-r7/BrotherVulnerabilities https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51978.yaml	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.