CVE-2019-13193
Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parse the cookie value properly. This would allow an attacker to execute arbitrary code on the device.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2020-03-13
- Last modified
- 2024-08-04
- Weaknesses
- CWE-787
Affected products
- Ads-2400n Firmware (Brother)
- Ads-2800w Firmware (Brother)
- Ads-3000n Firmware (Brother)
- Ads-3600w Firmware (Brother)
- Dcp-1610w Firmware (Brother)
- Dcp-1610we Firmware (Brother)
- Dcp-1610wr Firmware (Brother)
- Dcp-1610wvb Firmware (Brother)
- Dcp-1612w Firmware (Brother)
- Dcp-1612we Firmware (Brother)
- Dcp-1612wr Firmware (Brother)
- Dcp-1612wvb Firmware (Brother)
- Dcp-1615nw Firmware (Brother)
- Dcp-1616nw Firmware (Brother)
- Dcp-1617nw Firmware (Brother)
- Dcp-1618w Firmware (Brother)
- Dcp-1622we Firmware (Brother)
- Dcp-1623we Firmware (Brother)
- Dcp-1623wr Firmware (Brother)
- Dcp-7180dn Firmware (Brother)
- Dcp-7195dw Firmware (Brother)
- Dcp-9030cdn Firmware (Brother)
- Dcp-b7520dw Firmware (Brother)
- Dcp-b7530dn Firmware (Brother)
- Dcp-b7535dw Firmware (Brother)
- Dcp-j1100dw Firmware (Brother)
- Dcp-j572dw Firmware (Brother)
- Dcp-j572n Firmware (Brother)
- Dcp-j577n Firmware (Brother)
- Dcp-j582n Firmware (Brother)
- Dcp-j772dw Firmware (Brother)
- Dcp-j774dw Firmware (Brother)
- Dcp-j972n Firmware (Brother)
- Dcp-j973n-b Firmware (Brother)
- Dcp-j973n-w Firmware (Brother)
- Dcp-j978n-b Firmware (Brother)
- Dcp-j978n-w Firmware (Brother)
- Dcp-j981n Firmware (Brother)
- Dcp-j982n-b Firmware (Brother)
- Dcp-j982n-w Firmware (Brother)
- Dcp-j988n(jpn) Firmware (Brother)
- Dcp-l2520dw Firmware (Brother)
- Dcp-l2520dwr Firmware (Brother)
- Dcp-l2530dw Firmware (Brother)
- Dcp-l2531dw Firmware (Brother)
- Dcp-l2532dw Firmware (Brother)
- Dcp-l2535dw Firmware (Brother)
- Dcp-l2537dw Firmware (Brother)
- Dcp-l2540dn Firmware (Brother)
- Dcp-l2540dnr Firmware (Brother)
- Dcp-l2540dw(jpn) Firmware (Brother)
- Dcp-l2540dw Firmware (Brother)
- Dcp-l2541dw Firmware (Brother)
- Dcp-l2550dn Firmware (Brother)
- Dcp-l2550dw(jpn) Firmware (Brother)
- Dcp-l2550dw Firmware (Brother)
- Dcp-l2551dn Firmware (Brother)
- Dcp-l2551dw Firmware (Brother)
- Dcp-l2552dn Firmware (Brother)
- Dcp-l2560dw Firmware (Brother)
- Dcp-l2560dwr Firmware (Brother)
- Dcp-l3510cdw Firmware (Brother)
- Dcp-l3517cdw Firmware (Brother)
- Dcp-l3550cdw Firmware (Brother)
- Dcp-l3551cdw Firmware (Brother)
- Dcp-l5500dn Firmware (Brother)
- Dcp-l5502dn Firmware (Brother)
- Dcp-l5600dn Firmware (Brother)
- Dcp-l5602dn Firmware (Brother)
- Dcp-l5650dn Firmware (Brother)
- Dcp-l5652dn Firmware (Brother)
- Dcp-l6600dw Firmware (Brother)
- Dcp-l8410cdw Firmware (Brother)
- Dcp-t510w(chn) Firmware (Brother)
- Dcp-t510w Firmware (Brother)
- Dcp-t710w(chn) Firmware (Brother)
- Dcp-t710w Firmware (Brother)
- Fax-l2700dn(jpn) Firmware (Brother)
- Fax-l2710dn(jpn) Firmware (Brother)
- Hl-1210w Firmware (Brother)
- Hl-1210we Firmware (Brother)
- Hl-1210wr Firmware (Brother)
- Hl-1210wvb Firmware (Brother)
- Hl-1211w Firmware (Brother)
- Hl-1212w Firmware (Brother)
- Hl-1212we Firmware (Brother)
- Hl-1212wr Firmware (Brother)
- Hl-1212wvb Firmware (Brother)
- Hl-1218w Firmware (Brother)
- Hl-1222we Firmware (Brother)
- Hl-1223we Firmware (Brother)
- Hl-2560dn Firmware (Brother)
- Hl-2595dw Firmware (Brother)
- Hl-3160cdw Firmware (Brother)
- Hl-3190cdw Firmware (Brother)
- Hl-5590dn Firmware (Brother)
- Hl-b2050dn Firmware (Brother)
- Hl-b2080dw Firmware (Brother)
- Hl-j6000cdw(jpn) Firmware (Brother)
- Hl-j6000dw Firmware (Brother)
References
- https://global.brother
- https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00100670_000
- https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-brother-printers/
