Brother Printers Debut Embedded HTTP Server Denial of Service (CVE-2017-16249)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(503373);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/04/21");

  script_cve_id("CVE-2017-16249");

  script_name(english:"Brother Printers Debut Embedded HTTP Server Denial of Service (CVE-2017-16249)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"The Debut embedded http server contains a remotely exploitable denial
of service where a single malformed HTTP POST request can cause the
server to hang until eventually replying (~300 seconds) with an HTTP
500 error. While the server is hung, print jobs over the network are
blocked and the web interface is inaccessible. An attacker can
continuously send this malformed request to keep the device
inaccessible to legitimate traffic.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # http://packetstormsecurity.com/files/144908/Debut-Embedded-httpd-1.20-Denial-Of-Service.html
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?dec6d9dd");
  script_set_attribute(attribute:"see_also", value:"https://www.exploit-db.com/exploits/43119/");
# https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-017/?fid=10211
# script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?661aae0c");
# https://www.trustwave.com/Resources/SpiderLabs-Blog/Denial-of-Service-Vulnerability-in-Brother-Printers/?page=1&year=0&month=0&LangType=1033
# script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?85f677d3");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2017-16249");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");

  script_set_attribute(attribute:"vuln_publication_date", value:"2017/11/10");
  script_set_attribute(attribute:"patch_publication_date", value:"2017/11/10");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/10/23");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:brother:dcp-j132w_firmware");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Brother");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Brother');

var asset = tenable_ot::assets::get(vendor:'Brother');

var vuln_cpes = {
    "cpe:/o:brother:dcp-j132w_firmware" :
        {"versionEndIncluding" : "1.20", "family" : "Brother"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);