PT-2023-21677 · Brother · Brother Iprint&Scan

Johan Francsics · Published 2023-05-18 · Updated 2025-01-22 · CVE-2023-28369

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brother iPrint&Scan versions 6.11.2 and earlier

Description The issue is related to improper access control, which can be exploited by other apps installed on the victim's Android device. This exploitation may result in the display of settings and/or log information of the affected app as a print preview.

Recommendations For Brother iPrint&Scan versions 6.11.2 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-28369

Affected Products

Brother Iprint&Scan

References · 6

• https://faq.brother.co.jp/app/answers/detail/a_id/13468 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-28369 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28369 · Security Note
• https://jvn.jp/en/vu/JVNVU97891206 · Note
• https://play.google.com/store/apps/details?id=com.brother.mfc.brprint · Note
• https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100794_000 · Note