Authentication Bypass in Brother Devices Exposes User Credentials

CVE-2024-51984

What is CVE-2024-51984?

An issue has been identified that allows an authenticated attacker to manipulate Brother network devices to connect with external services such as LDAP or FTP that are under the attacker's control. By doing so, the attacker can compel the device to authenticate with these services using existing credentials. This exploitation can lead to the disclosure of plaintext passwords, placing sensitive information at risk and potentially facilitating further unauthorized access to connected systems.

References