CVE-2024-51977

An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mnt_info.csv can be accessed via a GET request and no authentication is required. The returned result is a comma separated value (CSV) table of information. The leaked information includes the device’s model, firmware version, IP address, and serial number.

Scoring

Severity

MEDIUM

CVSS base score

5.3

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS probability

72.62%

CWE

CWE-538

Published

2025-06-25

Last modified

2026-03-30

Affected products

• Brother Industries, Ltd HL-L8260CDN
• Brother Industries, Ltd HL-L8260CDW
• Brother Industries, Ltd HL-L8360CDW
• Brother Industries, Ltd HL-L8360CDWT
• Brother Industries, Ltd HL-L9310CDW
• Brother Industries, Ltd DCP-L8410CDW
• Brother Industries, Ltd MFC-L8610CDW
• Brother Industries, Ltd MFC-L8690CDW

Weakness type

• CWE-538

Related vulnerabilities

• CVE-2026-80175 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
• CVE-2026-69507 — Microsoft Windows Search Component Information Disclosure Vulnerability
• CVE-2026-67361 — Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5
• CVE-2026-19229 — SourceCodester Online Clothing Store Dreamweaver Metadata Files _notes file information disclosure
• CVE-2026-12762 — Insertion of Sensitive Information into Externally-Accessible File in IBM Business Automation Insights
• CVE-2026-15574 — Vllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug default
• CVE-2025-36372 — IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables
• CVE-2026-50099 — Naxclow IoT Platform Insertion of sensitive information into Externally-Accessible file or directory

Markdown version · Browse all CVEs