Filtered by vendor Brother Subscriptions
Filtered by product Mfc-j491dw Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-29984 5 Brother, Brother Industries, Fujifilm and 2 more 434 Dcp-1610w, Dcp-1610w Firmware, Dcp-1610we and 431 more 2024-11-21 7.5 High
Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service (DoS) condition. As for the affected products/models/versions, see the detailed information provided by each vendor.
CVE-2019-13194 1 Brother 600 Ads-2400n, Ads-2400n Firmware, Ads-2800w and 597 more 2024-11-21 7.5 High
Some Brother printers (such as the HL-L8360CDW v1.20) were affected by different information disclosure vulnerabilities that provided sensitive information to an unauthenticated user who visits a specific URL.
CVE-2019-13193 1 Brother 600 Ads-2400n, Ads-2400n Firmware, Ads-2800w and 597 more 2024-11-21 8.8 High
Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parse the cookie value properly. This would allow an attacker to execute arbitrary code on the device.
CVE-2019-13192 1 Brother 600 Ads-2400n, Ads-2400n Firmware, Ads-2800w and 597 more 2024-11-21 9.8 Critical
Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to execute arbitrary code on the device.
CVE-2019-20457 1 Brother 1 Mfc-j491dw 2024-11-08 9.1 Critical
An issue was discovered on Brother MFC-J491DW C1806180757 devices. The printer's web-interface password hash can be retrieved without authentication, because the response header of any failed login attempt returns an incomplete authorization cookie. The value of the authorization cookie is the MD5 hash of the password in hexadecimal. An attacker can easily derive the true MD5 hash from this, and use offline cracking attacks to obtain administrative access to the device.