PT-2025-26811 · Brother · Brother Devices

Published 2025-06-25 · Updated 2026-03-30 · CVE-2024-51978

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Brother printers (affected versions not specified) Fujifilm printers (affected versions not specified) Ricoh printers (affected versions not specified) Konica Minolta printers (affected versions not specified) Toshiba printers (affected versions not specified)

Description: An unauthenticated attacker who knows the target device's serial number can generate the default administrator password for the device. This allows attackers to bypass authentication and potentially gain remote access to the printer. The flaw affects hundreds of printer models from multiple vendors, including Brother, Fujifilm, Ricoh, Konica Minolta, and Toshiba. A critical flaw, identified as CVE-2024-51978, is rated 9.8 in severity and allows attackers to generate default admin passwords using device serial numbers. This vulnerability cannot be patched in some cases.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-1391

Related Identifiers

CVE-2024-51978

Affected Products

Brother Devices

References · 46

• 🔥 https://github.com/rapid7/metasploit-framework/pull/20349 · Exploit
• 🔥 https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51978.yaml · Exploit
• 🔥 https://github.com/sfewer-r7/BrotherVulnerabilities · Exploit
• 🔥 https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf · Exploit
• https://konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-51978 · Security Note
• https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 · Vendor Advisory
• https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 · Vendor Advisory
• https://toshibatec.com/information/20250625_02.html · Vendor Advisory
• https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000 · Vendor Advisory
• https://reddit.com/r/CVEWatch/comments/1llq2ox/top_10_trending_cves_27062025 · Reddit Post
• https://twitter.com/CVEnew/status/1937776572397670671 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1lkwe8y/top_10_trending_cves_26062025 · Reddit Post
• https://twitter.com/office_globex/status/1945758213833654403 · Twitter Post
• https://twitter.com/cageyvdev/status/1940430332635005158 · Twitter Post