CVSS: 7.5EPSS: 2%CPEs: 2EXPL: 1CVE-2013-2674
https://notcve.org/view.php?id=CVE-2013-2674
03 Feb 2020 — Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive information from referrer logs due to inadequate handling of HTTP referrer headers. Los dispositivos Brother MFC-9970CDW versión 1.10 firmware L, contienen una vulnerabilidad de divulgación de información que permite a atacantes remotos visualizar información confidencial de los registros de referencia debido al manejo inadecuado de los encabezados referer de HTTP. • http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.8EPSS: 0%CPEs: 2EXPL: 1CVE-2013-2673
https://notcve.org/view.php?id=CVE-2013-2673
03 Feb 2020 — Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which allows physically proximate attackers to gain unauthorized access. Los dispositivos Brother MFC-9970CDW versión 1.10 firmware L, contienen una vulnerabilidad de omisión de seguridad que permite a atacantes físicamente cercanos conseguir acceso no autorizado. • http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html • CWE-863: Incorrect Authorization •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2013-2672
https://notcve.org/view.php?id=CVE-2013-2672
03 Feb 2020 — Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords. Los dispositivos Brother MFC-9970CDW con firmware 0D, permiten el envío de contraseñas en texto sin cifrar. • http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html • CWE-522: Insufficiently Protected Credentials •
CVSS: 4.8EPSS: 0%CPEs: 4EXPL: 1CVE-2018-11581 – Brother HL Series Printers 1.15 - Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2018-11581
01 Jun 2018 — Cross-site scripting (XSS) vulnerability on Brother HL series printers allows remote attackers to inject arbitrary web script or HTML via the url parameter to etc/loginerror.html. Vulnerabilidad Cross-Site Scripting (XSS) en las impresoras Brother de la serie HL permite que atacantes remotos inyecten scripts web o HTML mediante el parámetro url en etc/loginerror.html. • https://www.exploit-db.com/exploits/44839 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.8EPSS: 68%CPEs: 2EXPL: 5CVE-2017-16249 – Debut Embedded HTTPd 1.20 - Denial of Service
https://notcve.org/view.php?id=CVE-2017-16249
07 Nov 2017 — The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying (~300 seconds) with an HTTP 500 error. While the server is hung, print jobs over the network are blocked and the web interface is inaccessible. An attacker can continuously send this malformed request to keep the device inaccessible to legitimate traffic. El servidor http incorporado de Debut contiene una denegación de servicio exp... • https://packetstorm.news/files/id/180528 •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-12568
https://notcve.org/view.php?id=CVE-2017-12568
06 Aug 2017 — Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows remote attackers to hang the printer (disrupting its network connection) by sending a large amount of HTTP packets. Una vulnerabilidad de denegación de servicio en Debut embedded httpd 1.20 en Brother DCP-J132W (y, probablemente, otros modelos de DCP) permite que atacantes remotos bloqueen la impresora (interrumpiendo su conexión a la red) mediante el envío de una gran cantidad de paquete... • https://gist.github.com/tipilu/53f142466507b2ef4c8ceb08d22d1278 •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-2244
https://notcve.org/view.php?id=CVE-2017-2244
07 Jul 2017 — Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Una vulnerabilidad de Cross-Site Request Forgery (CSRF) en MFC-J960DWN con versiones de firmware ver.D y anteriores permite que atacantes remotos secuestren la autenticación de los administradores mediante vectores sin especificar. • http://jvn.jp/en/jp/JVN95996423/index.html • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 10.0EPSS: 30%CPEs: 33EXPL: 2CVE-2017-7588 – Brother MFC-J6520DW - Authentication Bypass / Password Change
https://notcve.org/view.php?id=CVE-2017-7588
12 Apr 2017 — On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt. Affected models are: MFC-J6973CDW MFC-J4420DW MFC-8710DW MFC-J4620DW MFC-L8850CDW MFC-J3720 MFC-J6520DW MFC-L2740DW MFC-J5910DW MFC-J6920DW MFC-L2700DW MFC-9130CW MFC-9330CDW MFC-9340CDW MFC-J5620DW MFC-J6720DW MFC-L8600CDW MFC-L9550CDW MFC-L2720DW DCP-L2540DW DCP-L2520DW HL-3140CW HL-3170CDW HL-3180CDW HL-L8350CDW HL-L2380DW ADS-2500W ADS-1000W ADS-1500W. En ciertos... • https://packetstorm.news/files/id/142105 • CWE-287: Improper Authentication •
CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 2CVE-2015-1056
https://notcve.org/view.php?id=CVE-2015-1056
16 Jan 2015 — Cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url parameter to general/status.html and possibly other pages. Vulnerabilidad de XSS en la impresora Brother MFC-J4410DW con firmware anteriro a L permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro url en general/status.html y posiblemente otras páginas. • http://packetstormsecurity.com/files/129841/Brother-MFC-J4410DW-Cross-Site-Scripting.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 3CVE-2013-2507
https://notcve.org/view.php?id=CVE-2013-2507
14 Mar 2014 — Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware G (1.03) allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/log_to_net.html or (2) kind parameter to fax/copy_settings.html, a different vulnerability than CVE-2013-2670 and CVE-2013-2671. Múltiples vulnerabilidades de XSS en la impresora Brother MFC-9970CDW con firmware G (1.03) permiten a atacantes remotos inyectar script Web o HTML arbitrarios a través del pará... • http://osvdb.org/93066 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •