CVE-2024-51978

Description

An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request.

PUBLISHED Reserved 2024-11-04 | Published 2025-06-25 | Updated 2026-03-30 | Assigner rapid7

Problem types

CWE-1391 Use of Weak Credentials

Product status

Credits

Stephen Fewer, Principal Security Researcher at Rapid7 finder

References

assets.contentstack.io/...rability-disclosure-whitepaper.pdf exploit

www.securityweek.com/...ions-of-brother-printers-to-hacking/

www.darkreading.com/...her-printers-critical-unpatchable-bug

www.bleepingcomputer.com/...exposes-default-admin-passwords/

www.rapid7.com/...her-devices-multiple-vulnerabilities-fixed third-party-advisory

assets.contentstack.io/...rability-disclosure-whitepaper.pdf technical-description

github.com/rapid7/metasploit-framework/pull/20349 exploit

github.com/sfewer-r7/BrotherVulnerabilities exploit

github.com/...s/blob/main/http/cves/2024/CVE-2024-51978.yaml exploit

support.brother.com/...spx?prod=group2&faqid=faq00100846_000 vendor-advisory

support.brother.com/...spx?prod=group2&faqid=faq00100848_000 vendor-advisory

support.brother.com/...?prod=lmgroup1&faqid=faqp00100620_000 vendor-advisory

www.toshibatec.com/information/20250625_02.html vendor-advisory

www.konicaminolta.com/...urity/advisory/pdf/km-2025-0001.pdf vendor-advisory

cve.org (CVE-2024-51978)

nvd.nist.gov (CVE-2024-51978)

Download JSON