Improper Access Control Vulnerability in Brother iPrint&Scan Application
CVE-2023-28369

3.3LOW

Key Information:

Vendor

Brother Industries, Ltd.

Status
Brother Iprint&scan
Vendor
CVE Published:
18 May 2023

What is CVE-2023-28369?

The Brother iPrint&Scan application, version V6.11.2 and earlier, is affected by an improper access control vulnerability that could be exploited by unauthorized applications running on a user's Android device. This vulnerability allows malicious apps to access and display sensitive settings and log information from the Brother application, potentially compromising user privacy and security.

Affected Version(s)

Brother iPrint&Scan V6.11.2 and earlier

References

https://support.brother.com/g/b/link.aspx?prod=group2&faq...
https://faq.brother.co.jp/app/answers/detail/a_id/13468
https://play.google.com/store/apps/details?id=com.brother...

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.