Server-Side Request Forgery Vulnerability in Brother Devices

CVE-2024-51980

What is CVE-2024-51980?

An unauthenticated attacker could exploit a specific functionality within Brother Multi-Function Devices to execute a limited server-side request forgery (SSRF). This vulnerability allows the attacker to manipulate the device into opening a TCP connection to a malicious IP address on any port, specifically when the WS-Addressing ReplyTo element is used in a SOAP request. While the attacker cannot control the data sent through the connection or receive any response, this vulnerability effectively facilitates internal TCP port scanning, potentially exposing sensitive configurations and network architecture.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References