Vulnerability · Published Jun 25, 2025 · Assigned by rapid7
CVE-2024-51978Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc.
Critical 9.8
In plain English
A critical-severity security flaw in DCP-B7520DW (China) from Brother Industries, Ltd. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 15.8% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit, Nuclei.
Official description
An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request.
Affected products (as reported)
Weakness: CWE-1391 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed third-party-advisory
- https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf technical-description
- https://github.com/rapid7/metasploit-framework/pull/20349 exploit
- https://github.com/sfewer-r7/BrotherVulnerabilities exploit
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51978.yaml exploit
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 vendor-advisory
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 vendor-advisory
- https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000 vendor-advisory
- https://www.toshibatec.com/information/20250625_02.html vendor-advisory
- https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf vendor-advisory
- https://www.securityweek.com/new-vulnerabilities-expose-millions-of-brother-printers-to-hacking/
- https://www.darkreading.com/endpoint-security/millions-brother-printers-critical-unpatchable-bug
- https://www.bleepingcomputer.com/news/security/brother-printer-bug-in-689-models-exposes-default-admin-passwords/