CVE record · CVE-2024-51980

Unauthenticated Server Side Request Forgery (SSRF) via WS-Addressing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.

CVSS 5.3 MediumEPSS 0.010 · 63rd percentile

Published by the CVE Program (CNA: rapid7) at 25 Jun 2025, 07:22 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Brother Industries, Ltd	HL-L8260CDN	affected 1.65(ZH) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L8260CDW	affected 1.65(ZH) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L8360CDW	affected 1.68(ZG) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L8360CDWT	affected 1.68(ZG) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L9310CDW	affected 1.68(ZG) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L8410CDW	affected ZK and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L8610CDW	affected ZK and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L8690CDW	affected ZK and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L8900CDW	affected ZM and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L9570CDW	affected ZM and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L9577CDW	affected ZM and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L5210DN	affected 1.0 to 1.14(H), inclusive semver Other versions: unaffected
Brother Industries, Ltd	HL-L5212DN	affected 1.14(H) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L5215DN	affected 1.14(H) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L5210DW	affected 1.0 to 1.14(H), inclusive semver Other versions: unaffected
Brother Industries, Ltd	HL-L5210DWT	affected 1.14(H) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L5212DW	affected 1.14(H) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L5215DW	affected 1.14(H) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L6210DW	affected 1.14(H) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L6210DWT	affected 1.14(H) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L6217DW	affected 1.14(H) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L5218DN	affected 1.12(F) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L5228DW	affected 1.12(F) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L6310DW	affected 1.0 to 1.16(G), inclusive semver Other versions: unaffected
Brother Industries, Ltd	HL-L6410DN	affected 1.16(G) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L6415DN	affected 1.16(G) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L6412DW	affected 1.16(G) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L6415DW	affected 1.16(G) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L6415DWT	affected 1.16(G) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-L6418DW	affected 1.16(G) and earlier semver Other versions: unaffected
Brother Industries, Ltd	HL-EX415DW	affected 1.16(G) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L5510DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L5512DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L5518DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L5510DW	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L5610DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L5660DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	DCP-L5662DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L5710DN	affected 1.18(J) and earlier semver Other versions: unaffected
Brother Industries, Ltd	MFC-L5715DN	affected 1.18(J) and earlier semver Other versions: unaffected

And 668 more products. The full list is on the CVE record.

Identifiers: CVE-2024-51980
CNA: rapid7
Weakness (CWE): CWE-918
Tags: Brother Industries, Ltd HL-L8260CDN
Brother Industries, Ltd HL-L8260CDW
Brother Industries, Ltd HL-L8360CDW
Brother Industries, Ltd HL-L8360CDWT
Brother Industries, Ltd HL-L9310CDW
Brother Industries, Ltd DCP-L8410CDW
Brother Industries, Ltd MFC-L8610CDW
Brother Industries, Ltd MFC-L8690CDW
Server-side request forgery (SSRF)
Published: 25 Jun 2025
Updated: 7 Apr 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
5.3	Medium	3.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	CNA (rapid7)

CISA KEV Not listed.
EPSS 0.010, the 63rd percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 25 Jun 2025. New records show when each source confirmed them.

Sources

References from the CNA

support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 vendor-advisory
support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 vendor-advisory
support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000 vendor-advisory
www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html vendor-advisory
www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007 vendor-advisory
www.toshibatec.com/information/20250625_02.html vendor-advisory
www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf vendor-advisory
www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed third-party-advisory
assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf technical-description
github.com/sfewer-r7/BrotherVulnerabilities exploit

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.