CSRF Vulnerability in Brother MFC-J960DWN Printer Firmware
CVE-2017-2244

8.8HIGH

Key Information:

Vendor

Brother Industries, Ltd.

Status
Mfc-j960dwn
Vendor
CVE Published:
7 July 2017

What is CVE-2017-2244?

A cross-site request forgery (CSRF) vulnerability exists in the firmware of Brother MFC-J960DWN printers, allowing attackers to hijack authentication from administrators. This exploitation could lead to unauthorized changes and access to sensitive printer settings, which poses a risk to the integrity of information processed by the device. Users are encouraged to apply security patches and follow best practices to mitigate potential attacks.

Affected Version(s)

MFC-J960DWN firmware ver.D and earlier

References

http://support.brother.co.jp/j/s/support/vul_info/JVN9599...
x_refsource_CONFIRM
http://jvn.jp/en/jp/JVN95996423/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.