25 matches found
Multi-function Printer - Unauthorized Access Detection
Unauthorized access to MFP Multi-function printer using eSCL protocol allows attackers to scan documents left physically in the printer and send them to an arbitrary location. Furthermore, exposure of this endpoint allows attackers to gather information about the printer, serial number, model, an...
EUVD-2015-5799
Malware in sbrugna...
EUVD-2023-53953
Malicious code in bioql PyPI...
Multiple Brother and its OEM products with weak initial administrator passwords
Overview Multiple products provided by BROTHER INDUSTRIES, LTD and other OEM vendors are setup with weak initial administrator passwords, which can be derived from their serial numbers. This is reported by Rapid7, and treated on JVNVU90043828, CVE-2024-51978. Brother states that 1 serial numbers...
CVE-2025-8452: Insertion of Sensitive Information into Externally-Accessible File or Directory
By using the "uscan" protocol provided by the eSCL specification, an attacker can discover the serial number of multi-function printers that implement the Brother-provided firmware. This serial number can, in turn, can be leveraged by the flaw described by CVE-2024-51978 to calculate the default...
PT-2025-32682 · Brother Industries +2 · Ads-1250W +668
CVE-2025-8452 By using the "uscan" protocol provided by the eSCL specification, an attacker can discover the serial number of multi-function printers that implement the Brother-provi… https://t.co/pbwa4nsgUj...
CVE-2023-4063
Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request...
CVE-2023-4063
Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request...
CVE-2023-4063
Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request...
CVE-2023-4063
Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request...
CVE-2023-4063
Certain HP OfficeJet Pro printers are vulnerable to a Denial of Service (DoS) condition. The root cause is insufficient validation of input data within the printer's microprogramming software , which can be triggered by sending an improper eSCL URL GET request . This vulnerability allows an attac...
CVE-2023-4063
Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request...
CVE-2023-4063: Uncontrolled Resource Consumption
Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request...
PT-2024-2421
Name of the Vulnerable Software and Affected Versions HP OfficeJet Pro printers affected versions not specified Description The issue is related to insufficient input validation in the printer's firmware, which can be exploited by a remote attacker to cause a Denial of Service. This can occur whe...
Certain HP OfficeJet Pro Printers - Potential Denial of Service
Certain HP OfficeJet Pro printers are potentially vulnerable to a Denial of Service when using an improper eSCL URL GET request. Update your printer firmware...
SUSE SLES12 Security Update : sane-backends (SUSE-SU-2020:3125-1)
This update for sane-backends fixes the following issues : sane-backends version upgrade to 1.0.31 : - sane-backends version upgrade to 1.0.30 fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862, CVE-2020-12863, CVE-2020-12864, CVE-2020-12865, CVE-2020-12866, CVE-2020-12867 bsc1172524 -...
SUSE-SU-2020:3125-1 Security update for sane-backends
This update for sane-backends fixes the following issues: - sane-backends version upgrade to 1.0.31: sane-backends version upgrade to 1.0.30 fixes memory corruption bugs CVE-2020-12861, CVE-2020-12862, CVE-2020-12863, CVE-2020-12864, CVE-2020-12865, CVE-2020-12866, CVE-2020-12867 bsc1172524...
Mac OS X eSCL Information Disclosure
The vulnerability of the AirScan component of the Mac OS X operating system lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain access to data contained in eSCL packets through a “man-in-the-middle” attack...
