PT-2020-9383 · Brother · Dcp-1610We Firmware+5

Published 2020-03-13 · Updated 2023-08-16 · CVE-2019-13194

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Brother printers (such as the HL-L8360CDW version 1.20) ads-2400n firmware ads-2800w firmware ads-3000n firmware ads-3600w firmware dcp-1610w firmware dcp-1610we firmware dcp-1610wr firmware dcp-1610wvb firmware

Description: The issue involves different information disclosure vulnerabilities that provide sensitive information to an unauthenticated user who visits a specific URL.

Recommendations: For HL-L8360CDW version 1.20, consider restricting access to the specific URL that discloses sensitive information until a patch is available. For ads-2400n firmware, ads-2800w firmware, ads-3000n firmware, ads-3600w firmware, dcp-1610w firmware, dcp-1610we firmware, dcp-1610wr firmware, and dcp-1610wvb firmware, restrict access to the specific URL that discloses sensitive information until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-13194

Affected Products

Hl-L8360Cdw

Ads-2400N Firmware

Ads-2800W Firmware

Ads-3000N Firmware

Ads-3600W Firmware

Dcp-1610We Firmware

References · 7

• 🔥 https://nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-brother-printers · Exploit
• https://global.brother · Vendor Advisory
• https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00100670_000 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13194 · Security Note
• https://t.me/cvenotify/1659 · Telegram Post
• https://twitter.com/geekphane/status/1692047606749295015 · Twitter Post
• https://t.me/cvenotify/56642 · Telegram Post