HL-L8260CDN vulnerabilities

4 known vulnerabilities in HL-L8260CDN from Brother Industries. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  HL-L8260CDN: Improper Validation of Syntactic Correctness of Input

  CVE-2024-51983Jun 25, 2025Brother IndustriesEPSS 11.8%

  An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. The device will reboot, after which the attacker can reissue

• 7.5 High severity

  HL-L8260CDN: Improper Validation of Syntactic Correctness of Input

  CVE-2024-51982Jun 25, 2025Brother IndustriesEPSS 10.7%

  An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language (PJL) command that will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. A malformed

• 7.2 High severity

  HL-L8260CDN: Stack-based Buffer Overflow

  CVE-2024-51979Jun 25, 2025Brother IndustriesEPSS 1.15%

  An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631). The malformed request will contain an empty Ori

• 9.8 Critical severity

  DCP-J928N-W/B: Use of Weak Credentials

  CVE-2024-51978Jun 25, 2025Brother IndustriesEPSS 15.8%

  An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device's serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or