Back to Database
Status published
High
CVE-2024-51982
Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh.
Vulnerability Description
An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language (PJL) command that will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. A malformed PJL variable FORMLINES is set to a non number value causing the target to crash.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-51982
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Stephen Fewer, Principal Security Researcher at Rapid7
References
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000
- https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007
- https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed
- https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf
- https://github.com/sfewer-r7/BrotherVulnerabilities
More from Brother Industries, Ltd
View All →CVE-2025-8452
Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc.
Medium
4.3
CVE-2024-51984
Authenticated disclosure of external service passwords via pass-back attack affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.
Medium
6.8
CVE-2024-51983
Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.
High
7.5
CVE-2024-51981
Unauthenticated Server Side Request Forgery (SSRF) via WS-Eventing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Toshiba Tec, and Konica Minolta, Inc.
Medium
5.3
CVE-2024-51980
Unauthenticated Server Side Request Forgery (SSRF) via WS-Addressing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.
Medium
5.3
Affected Vendor
Brother Industries, Ltd
View all reports →Affected Software
HL-L8260CDN, HL-L8260CDW, HL-L8360CDW, HL-L8360CDWT, HL-L9310CDW, DCP-L8410CDW, MFC-L8610CDW, MFC-L8690CDW, MFC-L8900CDW, MFC-L9570CDW, MFC-L9577CDW, HL-L2325DW, HL-L2350DW, HL-L2351DW, HL-L2352DW, HL-L2357DW, HL-L2370DN, HL-L2371DN, HL-L2372DN, HL-2590DN, HL-L2370DW, HL-L2370DWXL, HL-L2375DW, HL-L2376DW, HL-B2050DN, HL-B2080DW, HL-L2385DW, HL-L2386DW, HL-2595DW, HL-L2350DWR, HL-L2370DNR, HL-L2375DWR, HL-L2395DW, MFC-L2730DW, MFC-L2732DW, MFC-L2750DW, MFC-L2750DWXL, MFC-L2751DW, MFC-L2770DW, MFC-L2771DW, MFC-L2730DWR, MFC-L2750DWR, DCP-7195DW, MFC-7895DW, MFC-L2730DN, HL-L2390DW, DCP-L2530DW, DCP-L2531DW, DCP-L2532DW, DCP-L2535DW, DCP-L2537DW, DCP-B7520DW, DCP-L2550DN, DCP-L2550DW, DCP-L2551DN, DCP-L2551DW, DCP-L2552DN, DCP-B7535DW, MFC-L2690DW, MFC-L2710DN, MFC-L2712DN, MFC-L2710DW, MFC-L2712DW, MFC-L2713DW, MFC-L2715DW, MFC-L2716DW, MFC-L2717DW, MFC-B7715DW, DCP-L2530DWR, DCP-L2550DNR, MFC-L2710DNR, MFC-L2710DWR, FAX-L2710DN, DCP-7190DN, DCP-B7530DN, MFC-7890DN, MFC-B7720DN, DCP-7090DW, DCP-7190DW, HL-L3210CW, HL-L3230CDN, HL-L3230CDW, HL-3160CDW, HL-L3270CDW, HL-3190CDW, DCP-L3510CDW, DCP-L3517CDW, HL-L3290CDW, DCP-L3551CDW, DCP-L3550CDW, DCP-9030CDN, MFC-L3710CDW, MFC-L3730CDN, MFC-9150CDN, MFC-L3735CDN, MFC-L3745CDW, MFC-L3750CDW, MFC-9350CDW, MFC-L3770CDW, DCP-T520W, DCP-T525W, DCP-T720DW, DCP-T725DW, DCP-T820DW, DCP-T825DW, MFC-T920DW, MFC-T925DW, DCP-T220, DCP-T225, DCP-T226, DCP-T420W, DCP-T425W, DCP-T426W, DCP-T428W, DCP-C421W, MFC-J805DW, DCP-J1100DW, MFC-J995DW, MFC-J1300DW, DCP-J988N, MFC-J1500N, MFC-J1605DN, MFC-J5845DW(XL), MFC-J5945DW, MFC-J6945DW, MFC-J6947DW, HL-J6000DW, HL-J6100DW, MFC-J6997CDW, MFC-J6999CDW, HL-J6000CDW, MFC-T4500DW, HL-T4000DW, MFC-J5330DW, MFC-J5335DW, MFC-J2330DW, MFC-J5730DW, MFC-J5830DW, MFC-J5930DW, MFC-J2730DW, MFC-J6530DW, MFC-J6730DW, MFC-J3530DW, MFC-J6930DW, MFC-J6935DW, MFC-J3930DW, MFC-J6535DW, MFC-J6580CDW, MFC-J6980CDW, MFC-J6995CDW, MFC-J5630CDW, MFC-J6583CDW, MFC-J6983CDW, DCP-T510W, DCP-T710W, MFC-T810W, MFC-T910DW, DCP-J572DW, MFC-J491DW, MFC-J497DW, DCP-J772DW, DCP-J774DW, MFC-J890DW, MFC-J895DW, MFC-J690DW, DCP-J572N, DCP-J577N, DCP-J582N, DCP-J972N, DCP-J973N-W/B, DCP-J978N-W/B, DCP-J981N, DCP-J982N-W/B, MFC-J893N, MFC-J898N, MFC-J738DN, MFC-J738DWN, MFC-J998DN, MFC-J998DWN, DCP-J587N, DocuPrint P235 d, DocuPrint P275 dw, DocuPrint P285 dw, DocuPrint P288 dw, DocuPrint M235 dw, DocuPrint M235 z, DocuPrint M275 z, DocuPrint M285 z, DocuPrint M288 dw, DocuPrint M288 z, SP 230DNw, P 201W, M 340W, SP 230SFNw, M 340FW, DCP-J987N-W/B, DCP-T510W(China), DCP-T710W(China), MFC-J805DWXL, MFC-J815DWXL, MFC-J995DWXL, MFC-T810W(China), DCP-B7520DW (China), DCP-B7535DW (China), DCP-L2535DW (China), DCP-L2550DW (China), DCP-L2550DW (Japan), DCP-L2550DW (Taiwan), MFC-L2715DW (Taiwan/Korea/Hong Kong), MFC-L2750DW (Japan), MFC-L3770CDW (Japan), MFC-L8610CDW (Japan), MFC-L9570CDW (Japan), ADS-2400N, ADS-2800W, ADS-3000N, ADS-3600W, DCP-J973N W/B, DCP-J978N W/B, DCP-J982N W/B, DCP-J987N W/B, MFC-J903N
Vulnerable Versions:
0, A
Timeline
Official Publish:
June 25th, 2025
Last Modified:
April 2nd, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.