CVE-2024-51982

Summary

An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language (PJL) command that will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. A malformed PJL variable FORMLINES is set to a non number value causing the target to crash.

Affected Software

VendorProductVersion RangeStatus
Brother Industries, LtdHL-L8260CDN0 <= 1.65(ZH)affected
Brother Industries, LtdHL-L8260CDW0 <= 1.65(ZH)affected
Brother Industries, LtdHL-L8360CDW0 <= 1.68(ZG)affected
Brother Industries, LtdHL-L8360CDWT0 <= 1.68(ZG)affected
Brother Industries, LtdHL-L9310CDW0 <= 1.68(ZG)affected
Brother Industries, LtdDCP-L8410CDW0 <= ZKaffected
Brother Industries, LtdMFC-L8610CDW0 <= ZKaffected
Brother Industries, LtdMFC-L8690CDW0 <= ZKaffected
Brother Industries, LtdMFC-L8900CDW0 <= ZMaffected
Brother Industries, LtdMFC-L9570CDW0 <= ZMaffected
Brother Industries, LtdMFC-L9577CDW0 <= ZMaffected
Brother Industries, LtdHL-L2325DW0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2350DW0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2351DW0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2352DW0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2357DW0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2370DN0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2371DN0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2372DN0 <= 1.74(ZE)affected
Brother Industries, LtdHL-2590DN0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2370DW0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2370DWXL0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2375DW0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2376DW0 <= 1.74(ZE)affected
Brother Industries, LtdHL-B2050DN0 <= 1.74(ZE)affected
Brother Industries, LtdHL-B2080DW0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2385DW0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2386DW0 <= 1.74(ZE)affected
Brother Industries, LtdHL-2595DW0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2350DWR0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2370DNR0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2375DWR0 <= 1.74(ZE)affected
Brother Industries, LtdHL-L2395DW0 <= ZCaffected
Brother Industries, LtdMFC-L2730DW0 <= ZCaffected
Brother Industries, LtdMFC-L2732DW0 <= ZCaffected
Brother Industries, LtdMFC-L2750DWA <= ZCaffected
Brother Industries, LtdMFC-L2750DWXL0 <= ZCaffected
Brother Industries, LtdMFC-L2751DW0 <= ZCaffected
Brother Industries, LtdMFC-L2770DW0 <= ZCaffected
Brother Industries, LtdMFC-L2771DW0 <= ZCaffected
Brother Industries, LtdMFC-L2730DWR0 <= ZCaffected
Brother Industries, LtdMFC-L2750DWR0 <= ZCaffected
Brother Industries, LtdDCP-7195DW0 <= Raffected
Brother Industries, LtdMFC-7895DW0 <= Raffected
Brother Industries, LtdMFC-L2730DN0 <= Raffected
Brother Industries, LtdHL-L2390DW0 <= ZCaffected
Brother Industries, LtdDCP-L2530DW0 <= ZCaffected
Brother Industries, LtdDCP-L2531DW0 <= ZCaffected
Brother Industries, LtdDCP-L2532DW0 <= ZCaffected
Brother Industries, LtdDCP-L2535DWA <= ZCaffected
Brother Industries, LtdDCP-L2537DW0 <= ZCaffected
Brother Industries, LtdDCP-B7520DW0 <= Vaffected
Brother Industries, LtdDCP-L2550DN0 <= ZCaffected
Brother Industries, LtdDCP-L2550DWA <= ZCaffected
Brother Industries, LtdDCP-L2551DN0 <= ZCaffected
Brother Industries, LtdDCP-L2551DW0 <= ZCaffected
Brother Industries, LtdDCP-L2552DN0 <= ZCaffected
Brother Industries, LtdDCP-B7535DW0 <= Vaffected
Brother Industries, LtdMFC-L2690DW0 <= ZCaffected
Brother Industries, LtdMFC-L2710DN0 <= ZCaffected
Brother Industries, LtdMFC-L2712DN0 <= ZCaffected
Brother Industries, LtdMFC-L2710DW0 <= ZCaffected
Brother Industries, LtdMFC-L2712DW0 <= ZCaffected
Brother Industries, LtdMFC-L2713DW0 <= ZCaffected
Brother Industries, LtdMFC-L2715DW0 <= ZCaffected
Brother Industries, LtdMFC-L2716DW0 <= ZCaffected
Brother Industries, LtdMFC-L2717DW0 <= ZCaffected
Brother Industries, LtdMFC-B7715DW0 <= ZCaffected
Brother Industries, LtdDCP-L2530DWR0 <= ZCaffected
Brother Industries, LtdDCP-L2550DNR0 <= ZCaffected
Brother Industries, LtdMFC-L2710DNR0 <= ZCaffected
Brother Industries, LtdMFC-L2710DWR0 <= ZCaffected
Brother Industries, LtdFAX-L2710DN0 <= Raffected
Brother Industries, LtdDCP-7190DN0 <= Vaffected
Brother Industries, LtdDCP-B7530DN0 <= Vaffected
Brother Industries, LtdMFC-7890DN0 <= Vaffected
Brother Industries, LtdMFC-B7720DN0 <= Vaffected
Brother Industries, LtdDCP-7090DW0 <= Maffected
Brother Industries, LtdDCP-7190DW0 <= Maffected
Brother Industries, LtdHL-L3210CW0 <= 1.39(ZA)affected
Brother Industries, LtdHL-L3230CDN0 <= 1.39(ZA)affected
Brother Industries, LtdHL-L3230CDW0 <= 1.39(ZA)affected
Brother Industries, LtdHL-3160CDW0 <= 1.39(ZA)affected
Brother Industries, LtdHL-L3270CDW0 <= 1.36(ZA)affected
Brother Industries, LtdHL-3190CDW0 <= 1.36(ZA)affected
Brother Industries, LtdDCP-L3510CDW0 <= ZAaffected
Brother Industries, LtdDCP-L3517CDW0 <= ZAaffected
Brother Industries, LtdHL-L3290CDW0 <= ZAaffected
Brother Industries, LtdDCP-L3551CDW0 <= ZAaffected
Brother Industries, LtdDCP-L3550CDW0 <= ZEaffected
Brother Industries, LtdDCP-9030CDN0 <= ZEaffected
Brother Industries, LtdMFC-L3710CDW0 <= ZEaffected
Brother Industries, LtdMFC-L3730CDN0 <= ZEaffected
Brother Industries, LtdMFC-9150CDN0 <= ZEaffected
Brother Industries, LtdMFC-L3735CDN0 <= ZEaffected
Brother Industries, LtdMFC-L3745CDW0 <= ZEaffected
Brother Industries, LtdMFC-L3750CDW0 <= ZEaffected
Brother Industries, LtdMFC-9350CDW0 <= ZEaffected
Brother Industries, LtdMFC-L3770CDWA <= ZEaffected
Brother Industries, LtdDCP-T520W0 <= 1.21(M)affected
Brother Industries, LtdDCP-T525W0 <= 1.21(M)affected
Brother Industries, LtdDCP-T720DW0 <= 1.20(L)affected
Brother Industries, LtdDCP-T725DW0 <= 1.20(L)affected
Brother Industries, LtdDCP-T820DW0 <= 1.20(L)affected
Brother Industries, LtdDCP-T825DW0 <= 1.20(L)affected
Brother Industries, LtdMFC-T920DW0 <= 1.23(N)affected
Brother Industries, LtdMFC-T925DW0 <= 1.23(N)affected
Brother Industries, LtdDCP-T2200 <= 1.27(K)affected
Brother Industries, LtdDCP-T2250 <= 1.27(K)affected
Brother Industries, LtdDCP-T2260 <= 1.27(K)affected
Brother Industries, LtdDCP-T420W0 <= 1.27(K)affected
Brother Industries, LtdDCP-T425W0 <= 1.27(K)affected
Brother Industries, LtdDCP-T426W0 <= 1.27(K)affected
Brother Industries, LtdDCP-T428W0 <= 1.27(K)affected
Brother Industries, LtdDCP-C421W0 <= 1.04(D)affected
Brother Industries, LtdMFC-J805DW0 <= Jaffected
Brother Industries, LtdDCP-J1100DW0 <= Paffected
Brother Industries, LtdMFC-J995DW0 <= Paffected
Brother Industries, LtdMFC-J1300DW0 <= Paffected
Brother Industries, LtdDCP-J988N0 <= Qaffected
Brother Industries, LtdMFC-J1500N0 <= Paffected
Brother Industries, LtdMFC-J1605DN0 <= Kaffected
Brother Industries, LtdMFC-J5845DW(XL)0 <= Naffected
Brother Industries, LtdMFC-J5945DW0 <= Taffected
Brother Industries, LtdMFC-J6945DW0 <= Taffected
Brother Industries, LtdMFC-J6947DW0 <= Taffected
Brother Industries, LtdHL-J6000DW0 <= Saffected
Brother Industries, LtdHL-J6100DW0 <= Saffected
Brother Industries, LtdMFC-J6997CDW0 <= Taffected
Brother Industries, LtdMFC-J6999CDW0 <= Taffected
Brother Industries, LtdHL-J6000CDW0 <= Saffected
Brother Industries, LtdMFC-T4500DW0 <= Paffected
Brother Industries, LtdHL-T4000DW0 <= Naffected
Brother Industries, LtdMFC-J5330DW0 <= Waffected
Brother Industries, LtdMFC-J5335DW0 <= Waffected
Brother Industries, LtdMFC-J2330DW0 <= Waffected
Brother Industries, LtdMFC-J5730DW0 <= Yaffected
Brother Industries, LtdMFC-J5830DW0 <= Yaffected
Brother Industries, LtdMFC-J5930DW0 <= Yaffected
Brother Industries, LtdMFC-J2730DW0 <= Yaffected
Brother Industries, LtdMFC-J6530DW0 <= Waffected
Brother Industries, LtdMFC-J6730DW0 <= Waffected
Brother Industries, LtdMFC-J3530DW0 <= Waffected
Brother Industries, LtdMFC-J6930DW0 <= Zaffected
Brother Industries, LtdMFC-J6935DW0 <= Zaffected
Brother Industries, LtdMFC-J3930DW0 <= Zaffected
Brother Industries, LtdMFC-J6535DW0 <= Zaffected
Brother Industries, LtdMFC-J6580CDW0 <= Raffected
Brother Industries, LtdMFC-J6980CDW0 <= Saffected
Brother Industries, LtdMFC-J6995CDW0 <= Saffected
Brother Industries, LtdMFC-J5630CDW0 <= Laffected
Brother Industries, LtdMFC-J6583CDW0 <= Kaffected
Brother Industries, LtdMFC-J6983CDW0 <= Naffected
Brother Industries, LtdDCP-T510W0 <= Qaffected
Brother Industries, LtdDCP-T710W0 <= Qaffected
Brother Industries, LtdMFC-T810W0 <= Qaffected
Brother Industries, LtdMFC-T910DW0 <= Qaffected
Brother Industries, LtdDCP-J572DW0 <= Paffected
Brother Industries, LtdMFC-J491DW0 <= Qaffected
Brother Industries, LtdMFC-J497DW0 <= Qaffected
Brother Industries, LtdDCP-J772DW0 <= Taffected
Brother Industries, LtdDCP-J774DW0 <= Taffected
Brother Industries, LtdMFC-J890DW0 <= Taffected
Brother Industries, LtdMFC-J895DW0 <= Taffected
Brother Industries, LtdMFC-J690DW0 <= Taffected
Brother Industries, LtdDCP-J572N0 <= Waffected
Brother Industries, LtdDCP-J577N0 <= Waffected
Brother Industries, LtdDCP-J582N0 <= Waffected
Brother Industries, LtdDCP-J972N0 <= Yaffected
Brother Industries, LtdDCP-J973N-W/B0 <= Yaffected
Brother Industries, LtdDCP-J978N-W/B0 <= Yaffected
Brother Industries, LtdDCP-J981N0 <= Yaffected
Brother Industries, LtdDCP-J982N-W/B0 <= Yaffected
Brother Industries, LtdMFC-J893N0 <= Xaffected
Brother Industries, LtdMFC-J898N0 <= Xaffected
Brother Industries, LtdMFC-J738DN0 <= Maffected
Brother Industries, LtdMFC-J738DWN0 <= Maffected
Brother Industries, LtdMFC-J998DN0 <= Maffected
Brother Industries, LtdMFC-J998DWN0 <= Maffected
Brother Industries, LtdDCP-J587NA <= Faffected
FUJIFILM Business InnovationDocuPrint P235 d0 <= 1.15affected
FUJIFILM Business InnovationDocuPrint P275 dw0 <= 1.15affected
FUJIFILM Business InnovationDocuPrint P285 dw0 <= 1.15affected
FUJIFILM Business InnovationDocuPrint P288 dw0 <= 1.15affected
FUJIFILM Business InnovationDocuPrint M235 dw0 <= Kaffected
FUJIFILM Business InnovationDocuPrint M235 z0 <= Kaffected
FUJIFILM Business InnovationDocuPrint M275 z0 <= Laffected
FUJIFILM Business InnovationDocuPrint M285 z0 <= Laffected
FUJIFILM Business InnovationDocuPrint M288 dw0 <= Eaffected
FUJIFILM Business InnovationDocuPrint M288 z0 <= Eaffected
RICOHSP 230DNw0 <= 1.07(G)affected
RICOHP 201W0 <= 1.03D(D)affected
RICOHM 340W0 <= Gaffected
RICOHSP 230SFNw0 <= Jaffected
RICOHM 340FW0 <= Haffected
Brother Industries, LtdDCP-J987N-W/BA <= Faffected
Brother Industries, LtdDCP-T510W(China)A <= Naffected
Brother Industries, LtdDCP-T710W(China)A <= Naffected
Brother Industries, LtdMFC-J805DWXLA <= Jaffected
Brother Industries, LtdMFC-J815DWXLA <= Jaffected
Brother Industries, LtdMFC-J995DWXLA <= Paffected
Brother Industries, LtdMFC-T810W(China)A <= Naffected
Brother Industries, LtdDCP-B7520DW (China)A <= Vaffected
Brother Industries, LtdDCP-B7535DW (China)A <= Vaffected
Brother Industries, LtdDCP-L2535DW (China)A <= Maffected
Brother Industries, LtdDCP-L2550DW (China)A <= Maffected
Brother Industries, LtdDCP-L2550DW (Japan)A <= Raffected
Brother Industries, LtdDCP-L2550DW (Taiwan)A <= Vaffected
Brother Industries, LtdMFC-L2715DW (Taiwan/Korea/Hong Kong)A <= Vaffected
Brother Industries, LtdMFC-L2750DW (Japan)A <= Raffected
Brother Industries, LtdMFC-L3770CDW (Japan)A <= ZAaffected
Brother Industries, LtdMFC-L8610CDW (Japan)A <= ZDaffected
Brother Industries, LtdMFC-L9570CDW (Japan)A <= ZDaffected
Brother Industries, LtdADS-2400NA <= Taffected
Brother Industries, LtdADS-2800WA <= Taffected
Brother Industries, LtdADS-3000NA <= Taffected
Brother Industries, LtdADS-3600WA <= Taffected
Brother Industries, LtdDCP-J973N W/BA <= Yaffected
Brother Industries, LtdDCP-J978N W/BA <= Yaffected
Brother Industries, LtdDCP-J982N W/BA <= Yaffected
Brother Industries, LtdDCP-J987N W/BA <= Faffected
Brother Industries, LtdMFC-J903NA <= Xaffected

Weaknesses

  • CWE-1286: CWE-1286 Improper Validation of Syntactic Correctness of Input

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: yes
    • Technical Impact: partial

Additional References

References