What’s Vulnerable › Vulnerabilities
CVE-2024-51977: Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 46.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2025-06-25 · updated 2026-06-17
- Weakness: CWE-538
Description
An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mnt_info.csv can be accessed via a GET request and no authentication is required. The returned result is a comma separated value (CSV) table of information. The leaked information includes the device’s model, firmware version, IP address, and serial number.
Affected products
- Brother Industries, Ltd DCP-1610W: through ZB
- Brother Industries, Ltd DCP-1610WE: through ZB
- Brother Industries, Ltd DCP-1610WR: through ZB
- Brother Industries, Ltd DCP-1612W: through ZB
- Brother Industries, Ltd DCP-1612WE: through ZB
- Brother Industries, Ltd DCP-1612WR: through ZB
- Brother Industries, Ltd DCP-1615NW: through S
- Brother Industries, Ltd DCP-1616NW: through S
- Brother Industries, Ltd DCP-1617NW: through S
- Brother Industries, Ltd DCP-1618W: through R
- Brother Industries, Ltd DCP-1622WE: through ZB
- Brother Industries, Ltd DCP-1623WE: through ZB
- Brother Industries, Ltd DCP-1623WR: through ZB
- Brother Industries, Ltd DCP-7090DW: through M
- Brother Industries, Ltd DCP-7180DN: through R
- Brother Industries, Ltd DCP-7189DW: through R
- Brother Industries, Ltd DCP-7190DN: through V
- Brother Industries, Ltd DCP-7190DW: through M
- Brother Industries, Ltd DCP-7195DW: through R
- Brother Industries, Ltd DCP-9030CDN: through ZE
- Brother Industries, Ltd DCP-B7520DW: through V
- Brother Industries, Ltd DCP-B7520DW (China): from A through V
- Brother Industries, Ltd DCP-B7530DN: through V
- Brother Industries, Ltd DCP-B7535DW: through V
- Brother Industries, Ltd DCP-B7535DW (China): from A through V
- Brother Industries, Ltd DCP-C1210N: through 1.03(C)
- Brother Industries, Ltd DCP-C421W: through 1.04(D)
- Brother Industries, Ltd DCP-J1050DW: through 1.14(J)
- Brother Industries, Ltd DCP-J1100DW: through P
- Brother Industries, Ltd DCP-J1140DW: through 1.13(H)
References
- https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51977.yaml
- https://github.com/sfewer-r7/BrotherVulnerabilities
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000
- https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000
- https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html
- https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf
- https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007
- https://www.toshibatec.com/information/20250625_02.html
- https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf
Get alerted when CVE-2024-51977 or the next vulnerability affects your stack