What’s Vulnerable › Vulnerabilities
CVE-2024-51983: Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 11.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-06-25 · updated 2026-06-17
- Weakness: CWE-1286
Description
An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device.
Affected products
- Brother Industries, Ltd ADS-1250W: through R(3.75)
- Brother Industries, Ltd ADS-1350W: through C(1.06)
- Brother Industries, Ltd ADS-1700W: through R(3.75)
- Brother Industries, Ltd ADS-1800W: through C(1.06)
- Brother Industries, Ltd ADS-2400N: through T
- Brother Industries, Ltd ADS-2700W: through M(4.28)
- Brother Industries, Ltd ADS-2700We: through P(2.28)
- Brother Industries, Ltd ADS-2800W: through T
- Brother Industries, Ltd ADS-3000N: through T
- Brother Industries, Ltd ADS-3300W: through P(2.28)
- Brother Industries, Ltd ADS-3600W: through T
- Brother Industries, Ltd ADS-4300N: through P(2.28)
- Brother Industries, Ltd ADS-4500W: through P(2.28)
- Brother Industries, Ltd ADS-4700W: through P(2.28)
- Brother Industries, Ltd ADS-4900W: through P(2.28)
- Brother Industries, Ltd DCP-1610W: through ZB
- Brother Industries, Ltd DCP-1610WE: through ZB
- Brother Industries, Ltd DCP-1610WR: through ZB
- Brother Industries, Ltd DCP-1612W: through ZB
- Brother Industries, Ltd DCP-1612WE: through ZB
- Brother Industries, Ltd DCP-1612WR: through ZB
- Brother Industries, Ltd DCP-1615NW: through S
- Brother Industries, Ltd DCP-1616NW: through S
- Brother Industries, Ltd DCP-1617NW: through S
- Brother Industries, Ltd DCP-1618W: through R
- Brother Industries, Ltd DCP-1622WE: through ZB
- Brother Industries, Ltd DCP-1623WE: through ZB
- Brother Industries, Ltd DCP-1623WR: through ZB
- Brother Industries, Ltd DCP-7090DW: through M
- Brother Industries, Ltd DCP-7180DN: through R
References
- https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf
- https://github.com/sfewer-r7/BrotherVulnerabilities
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000
- https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000
- https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html
- https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf
- https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007
- https://www.toshibatec.com/information/20250625_02.html
- https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf
Get alerted when CVE-2024-51983 or the next vulnerability affects your stack