Vulners
Lucene search
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | Brother MFC-J6520DW - Authentication Bypass / Password Change Exploit | 12 Apr 201700:00 | – | zdt |
 | Multiple Brother device authentication bypass vulnerabilities | 18 Apr 201700:00 | – | cnvd |
 | CVE-2017-7588 | 12 Apr 201710:00 | – | cvelist |
 | Brother MFC-J6520DW - Authentication Bypass / Password Change | 11 Apr 201700:00 | – | exploitdb |
 | Brother MFC-J6520DW - Authentication Bypass Password Change | 11 Apr 201700:00 | – | exploitpack |
 | CVE-2017-7588 | 12 Apr 201710:59 | – | nvd |
 | Brother Devices - Authentication Bypass / Password Change Exploit | 24 Apr 201700:00 | – | openvas |
 | Brother MFC-J6520DW Password Change Authentication Bypass | 12 Apr 201700:00 | – | packetstorm |
 | Authorization | 12 Apr 201710:59 | – | prion |
Node
OROROROROROROROROROROROROROROROROROR
Node
Node
Node
OROROROR
| Source | Link |
|---|---|
| cxsecurity | www.cxsecurity.com/blad/WLB-2017040064 |
| exploit-db | www.exploit-db.com/exploits/41863/ |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| pwd_var | request body | /admin/password.html | Endpoint used to change the device admin password; attacker can craft request to set a new password if cookie/validation bypass is possible. | CWE-287 |
| newpass | request body | /admin/password.html | Endpoint used to change the device admin password; attacker can craft request to set a new password if cookie/validation bypass is possible. | CWE-287 |
| temp_retypePass | request body | /admin/password.html | Endpoint used to change the device admin password; attacker can craft request to set a new password if cookie/validation bypass is possible. | CWE-287 |
| pageid | request body | /admin/password.html | Endpoint used to change the device admin password; attacker can craft request to set a new password if cookie/validation bypass is possible. | CWE-287 |
| log_var | request body | /general/status.html | Endpoint used to obtain an authorization cookie after login attempt; can be abused to bypass authentication on vulnerable Brother devices. | CWE-287 |
| loginurl | request body | /general/status.html | Endpoint used to obtain an authorization cookie after login attempt; can be abused to bypass authentication on vulnerable Brother devices. | CWE-287 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 May 2026 00:24Current
9.2High risk
Vulners AI Score9.2
CVSS 39.8
CVSS 210
EPSS0.16645