What’s Vulnerable › Vulnerabilities

CVE-2023-29984

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-07-11 · updated 2026-06-17
• Weakness: CWE-476

Description

Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service (DoS) condition. As for the affected products/models/versions, see the detailed information provided by each vendor.

Affected products

• Brother Dcp-1610W Firmware: before z — fixed in z
• Brother Dcp-1610We Firmware: before z — fixed in z
• Brother Dcp-1610Wr Firmware: before z — fixed in z
• Brother Dcp-1610Wvb Firmware: before z — fixed in z
• Brother Dcp-1612W Firmware: before z — fixed in z
• Brother Dcp-1612We Firmware: before z — fixed in z
• Brother Dcp-1612Wr Firmware: before z — fixed in z
• Brother Dcp-1612Wvb Firmware: before z — fixed in z
• Brother Dcp-1615Nw Firmware: before r — fixed in r
• Brother Dcp-1616Nw Firmware: before r — fixed in r
• Brother Dcp-1617Nw Firmware: before r — fixed in r
• Brother Dcp-1618W Firmware: before p — fixed in p
• Brother Dcp-1622We Firmware: before z — fixed in z
• Brother Dcp-1623We Firmware: before z — fixed in z
• Brother Dcp-1623Wr Firmware: before z — fixed in z
• Brother Dcp-7180Dn Firmware: before p — fixed in p
• Brother Dcp-J4120Dw Firmware: before m — fixed in m
• Brother Dcp-J4220N-B Firmware: before m — fixed in m
• Brother Dcp-J4220N-W Firmware: before m — fixed in m
• Brother Dcp-J4225N-B Firmware: before h — fixed in h
• Brother Dcp-J4225N-W Firmware: before h — fixed in h
• Brother Dcp-J562Dw Firmware: before l — fixed in l
• Brother Dcp-J562N Firmware: before k — fixed in k
• Brother Dcp-J567N Firmware: before k — fixed in k
• Brother Dcp-J572Dw Firmware: before n — fixed in n
• Brother Dcp-J572N Firmware: before v — fixed in v
• Brother Dcp-J577N Firmware: before v — fixed in v
• Brother Dcp-J582N Firmware: before v — fixed in v
• Brother Dcp-J587N Firmware: before e — fixed in e
• Brother Dcp-J762N Firmware: before p — fixed in p

How to fix

Upgrade to a fixed version: Brother Dcp-1610W Firmware z; Brother Dcp-1610We Firmware z; Brother Dcp-1610Wr Firmware z; Brother Dcp-1610Wvb Firmware z; Brother Dcp-1612W Firmware z; Brother Dcp-1612We Firmware z; Brother Dcp-1612Wr Firmware z; Brother Dcp-1612Wvb Firmware z; Brother Dcp-1615Nw Firmware r; Brother Dcp-1616Nw Firmware r; Brother Dcp-1617Nw Firmware r; Brother Dcp-1618W Firmware p. Check the vendor advisory for mitigations.

References

• https://jvn.jp/en/vu/JVNVU93767756/index.html
• https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00100793_000
• https://support.brother.com/g/s/security/en/
• https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/browser_announce.html
• https://jvn.jp/en/vu/JVNVU93767756/index.html
• https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00100793_000
• https://support.brother.com/g/s/security/en/
• https://www.fujifilm.com/fbglobal/eng/company/news/notice/2023/browser_announce.html

Get alerted when CVE-2023-29984 or the next vulnerability affects your stack