Remote Code Execution Vulnerability in Brother Devices

CVE-2024-51983

What is CVE-2024-51983?

An unauthenticated attacker can exploit the Web Services feature on affected Brother devices via HTTP TCP port 80. By sending a specially crafted WS-Scan SOAP request with an unexpected JobToken value, the attacker can force the device to crash. Upon crashing, the device will reboot, allowing the attacker to repeat the command, resulting in a continuous cycle of failure and disruption. This vulnerability can severely affect the availability of the device, making it crucial for users to apply necessary updates or mitigations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References