PT-2025-26810 · Unknown · Network Printer

Published 2025-06-25 · Updated 2025-08-15 · CVE-2024-51977

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Brother, FUJIFILM, RICOH, Toshiba Tec, and Konica Minolta Printers (affected versions not specified)

Description: An unauthenticated attacker with access to the HTTP service (TCP port 80), HTTPS service (TCP port 443), or IPP service (TCP port 631) can leak sensitive information from a vulnerable device. Accessing the URI path /etc/mnt info.csv via a GET request does not require authentication and returns a comma separated value (CSV) table containing the device’s model, firmware version, IP address, and serial number. The CrowdSec Network has detected exploitation attempts targeting this issue, affecting over 750 different printer models. The leaked information can be used to generate a valid administrator account.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-538

Related Identifiers

CVE-2024-51977

Affected Products

Network Printer

References · 31

• 🔥 https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51977.yaml · Exploit
• 🔥 https://github.com/sfewer-r7/BrotherVulnerabilities · Exploit
• 🔥 https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf · Exploit
• https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 · Vendor Advisory
• https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 · Vendor Advisory
• https://fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html · Vendor Advisory
• https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000 · Vendor Advisory
• https://toshibatec.com/information/20250625_02.html · Vendor Advisory
• https://konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-51977 · Security Note
• https://ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007 · Vendor Advisory
• https://twitter.com/vFeed_IO/status/1948194927336419731 · Twitter Post
• https://t.me/cvetracker/26996 · Telegram Post
• https://t.me/cveNotify/132395 · Telegram Post
• https://twitter.com/CVEnew/status/1937776573211464100 · Twitter Post