Skip to content
Fencer Vulns
high 7.5

CVE-2024-51982 in the critical feed json

Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh.

published 2025-06-25 16 mo ago modified 2026-06-17 4 mo ago also EUVD-2024-54702

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
10.7%
EPSS 10.7% chance of exploitation in 30 days, percentile 95%
public exploits
0
none known

Summary

An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language (PJL) command that will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. A malformed PJL variable FORMLINES is set to a non number value causing the target to crash.

CISA SSVC

Exploitation
Proof of concept is public
Automatable
yes
Technical impact
partial
Assessed
16 mo ago

Exploit prediction

10.74% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • assets.contentstack.io https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf referenced PoC, tagged "exploit" by a source, unverified
  • github.com https://github.com/sfewer-r7/BrotherVulnerabilities referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

  • Brother Industries, Ltd HL-L8260CDN
  • Brother Industries, Ltd HL-L8260CDW
  • Brother Industries, Ltd HL-L8360CDW
  • Brother Industries, Ltd HL-L8360CDWT
  • Brother Industries, Ltd HL-L9310CDW
  • Brother Industries, Ltd DCP-L8410CDW
  • Brother Industries, Ltd MFC-L8610CDW
  • Brother Industries, Ltd MFC-L8690CDW
  • Brother Industries, Ltd MFC-L8900CDW
  • Brother Industries, Ltd MFC-L9570CDW
  • Brother Industries, Ltd MFC-L9577CDW
  • Brother Industries, Ltd HL-L2325DW
  • Brother Industries, Ltd HL-L2350DW
  • Brother Industries, Ltd HL-L2351DW
  • Brother Industries, Ltd HL-L2352DW
  • Brother Industries, Ltd HL-L2357DW
  • Brother Industries, Ltd HL-L2370DN
  • Brother Industries, Ltd HL-L2371DN
  • Brother Industries, Ltd HL-L2372DN
  • Brother Industries, Ltd HL-2590DN
  • Brother Industries, Ltd HL-L2370DW
  • Brother Industries, Ltd HL-L2370DWXL
  • Brother Industries, Ltd HL-L2375DW
  • Brother Industries, Ltd HL-L2376DW
  • Brother Industries, Ltd HL-B2050DN
  • Brother Industries, Ltd HL-B2080DW
  • Brother Industries, Ltd HL-L2385DW
  • Brother Industries, Ltd HL-L2386DW
  • Brother Industries, Ltd HL-2595DW
  • Brother Industries, Ltd HL-L2350DWR
  • Brother Industries, Ltd HL-L2370DNR
  • Brother Industries, Ltd HL-L2375DWR
  • Brother Industries, Ltd HL-L2395DW
  • Brother Industries, Ltd MFC-L2730DW
  • Brother Industries, Ltd MFC-L2732DW
  • Brother Industries, Ltd MFC-L2750DW
  • Brother Industries, Ltd MFC-L2750DWXL
  • Brother Industries, Ltd MFC-L2751DW
  • Brother Industries, Ltd MFC-L2770DW
  • Brother Industries, Ltd MFC-L2771DW
  • Brother Industries, Ltd MFC-L2730DWR
  • Brother Industries, Ltd MFC-L2750DWR
  • Brother Industries, Ltd DCP-7195DW
  • Brother Industries, Ltd MFC-7895DW
  • Brother Industries, Ltd MFC-L2730DN
  • Brother Industries, Ltd HL-L2390DW
  • Brother Industries, Ltd DCP-L2530DW
  • Brother Industries, Ltd DCP-L2531DW
  • Brother Industries, Ltd DCP-L2532DW
  • Brother Industries, Ltd DCP-L2535DW

Classification

Weakness
  • CWE-1286 Improper Validation of Syntactic Correctness of Input

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.