PT-2020-7409 · Brother · Brother Mfc-9970Cdw

Published 2020-02-03 · Updated 2020-02-05 · CVE-2013-2674

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Brother MFC-9970CDW version 1.10 firmware L

Description: The issue allows remote attackers to view sensitive information from referrer logs due to inadequate handling of HTTP referrer headers. This is an information disclosure issue.

Recommendations: For Brother MFC-9970CDW version 1.10 firmware L, consider restricting access to the referrer logs to minimize the risk of exploitation. Avoid using HTTP referrer headers in sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2013-2674

Affected Products

Brother Mfc-9970Cdw

References · 5

• 🔥 http://packetstormsecurity.com/files/121553/Brother-MFC-9970CDW-Firmware-0D-Cross-Site-Scripting.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-2674 · Security Note
• https://securityfocus.com/bid/59725 · Note
• https://t.me/cvenotify/731 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/84091 · Note