PT-2025-26821 · Brother · Brother Driver Installers For Windows

Julian Horoszkiewicz · Published 2025-06-25 · Updated 2025-08-19 · CVE-2025-49797

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Brother driver installers for Windows (affected versions not specified)

Description: The issue concerns a privilege escalation vulnerability in Brother driver installers for Windows. If exploited, an arbitrary program may be executed with administrative privilege. It is reported that a large number of device models are affected, with one source mentioning 1077 affected models.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2025-49797

Affected Products

Brother Driver Installers For Windows

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-49797 · Security Note
• https://twitter.com/ewilded/status/1937778277437047191 · Twitter Post
• https://jvn.jp/en/vu/JVNVU91819309 · Note
• https://toshibatec.com/information/20250625_01.html · Note
• https://t.me/cveNotify/132759 · Telegram Post
• https://ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000009 · Note
• https://support.brother.com/g/s/security · Note
• https://twitter.com/CVEnew/status/1937809336731918764 · Twitter Post
• https://t.me/cvenotify/126614 · Telegram Post
• https://t.me/cvetracker/27007 · Telegram Post