PT-2025-26812 · Hewlett Packard · Hp Ipp

Published 2025-06-25 · Updated 2025-06-30 · CVE-2024-51979

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: HP IPP versions (affected versions not specified)

Description: An authenticated attacker can trigger a stack-based buffer overflow by sending a malformed request to the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631). The malformed request contains an empty Origin header value and a malformed Referer header value. The Referer header value triggers a stack-based buffer overflow when the host value in the Referer header is processed and has a length greater than 64 bytes.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2024-51979

Affected Products

Hp Ipp

References · 15

• 🔥 https://github.com/sfewer-r7/BrotherVulnerabilities · Exploit
• 🔥 https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf · Exploit
• https://fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html · Vendor Advisory
• https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000 · Vendor Advisory
• https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 · Vendor Advisory
• https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 · Vendor Advisory
• https://konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-51979 · Security Note
• https://ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007 · Vendor Advisory
• https://t.me/cvetracker/26998 · Telegram Post
• https://rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed · Note
• https://t.me/s_e_reborn/5721 · Telegram Post
• https://twitter.com/cracbot/status/1939640098892763270 · Twitter Post
• https://twitter.com/CVEnew/status/1937776571529449945 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1937806150256251156 · Twitter Post