Brother Industries vulnerabilities
We track 6 vulnerabilities in Brother Industries products across 60+ products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on June 25, 2025.
Latest Brother Industries vulnerabilities
- 8.5 High severity
Multiple driver installers for Windows: Files or Directories Accessible to External Parties
Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. If exploited, an arbitrary program may be executed with the administrative privilege. As for the details of affected product names, model numbers, and versions, refer
- 7.5 High severity
HL-L8260CDN: Improper Validation of Syntactic Correctness of Input
An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. The device will reboot, after which the attacker can reissue
- 7.5 High severity
HL-L8260CDN: Improper Validation of Syntactic Correctness of Input
An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language (PJL) command that will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. A malformed
- 7.2 High severity
HL-L8260CDN: Stack-based Buffer Overflow
An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631). The malformed request will contain an empty Ori
- 9.8 Critical severity
DCP-J928N-W/B: Use of Weak Credentials
An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or
- 7.5 High severity
mfc-j960dwn_firmware: NULL Pointer Dereference
Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service (DoS) condition. As for the affected pro