← Volver a CVEs

CVE-2024-51984

MEDIUM

6.8

Descripcion

An authenticated attacker can reconfigure the target device to use an external service (such as LDAP or FTP) controlled by the attacker. If an existing password is present for an external service, the attacker can force the target device to authenticate to an attacker controlled device using the existing credentials for that external service. In the case of an external LDAP or FTP service, this will disclose the plaintext password for that external service to the attacker.

Detalles CVE

Puntuacion CVSS v3.16.8

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosHIGH

Interaccion usuarioNONE

Publicado6/25/2025

Ultima modificacion6/26/2025

Fuentenvd

Avistamientos honeypot0

Debilidades (CWE)

CWE-522

Referencias

https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf(cve@rapid7.com)

https://github.com/sfewer-r7/BrotherVulnerabilities(cve@rapid7.com)

https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000(cve@rapid7.com)

https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000(cve@rapid7.com)

https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000(cve@rapid7.com)

https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html(cve@rapid7.com)

https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf(cve@rapid7.com)

https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed(cve@rapid7.com)

https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007(cve@rapid7.com)

https://www.toshibatec.com/information/20250625_02.html(cve@rapid7.com)

https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.