CVE-2024-28237 OctoPrint XSS via the "Snapshot Test" feature in Classic Webcam plugin settings

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to configure or talk a victim with administrator rights into configuring a webcam snapshot URL which when tested through th...

CVE-2024-27974

Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet Services allows a remote unauthenticated attacker to alter user information. In the case the user is an administrator, the settings such as the administrator's ID, password, etc...

CVE-2024-22475

Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. allows a remote unauthenticated attacker to perform unintended operations on the affected product. As for the details of affected product names, mod...

CVE-2024-22475

CVE-2024-22475 is a cross-site request forgery (CSRF) vulnerability in Brother Web Based Management used by Brother printers/scanners. Multiple OpenVAS entries also map this CVE to Fuji Xerox / Fujifilm printers in the same Web-Based Management context. Root cause is CSRF in the web management in...

CVE-2024-21824

Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If this vulnerability is exploited, a network-adjacent user who can access the product may impersonate an administrative user. As for the...

CVE-2024-21824

CVE-2024-21824 is an improper authentication vulnerability in BROTHER printers/scanners that use Web Based Management. A network-adjacent attacker may impersonate an administrator if they can access the device. Connected sources confirm affected products are BROTHER printers/scanners with Web Bas...

CVE-2024-27974

CVE-2024-27974 describes a cross-site request forgery (CSRF) vulnerability in FUJIFILM printers that implement CentreWare Internet Services or Internet Services. The flaw allows a remote unauthenticated attacker to alter user information, and if the targeted user is an administrator, settings suc...

CVE-2024-27974

Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet Services allows a remote unauthenticated attacker to alter user information. In the case the user is an administrator, the settings such as the administrator's ID, password, etc...

CVE-2024-27974

Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet Services allows a remote unauthenticated attacker to alter user information. In the case the user is an administrator, the settings such as the administrator's ID, password, etc...

PT-2024-22179 · Fujifilm · Fujifilm Printers

Name of the Vulnerable Software and Affected Versions: FUJIFILM printers affected versions not specified Description: A cross-site request forgery issue allows a remote unauthenticated attacker to alter user information. If the targeted user is an administrator, settings such as the administrator...

PT-2024-19076 · Brother Industries · Brother

Name of the Vulnerable Software and Affected Versions: Brother products affected versions not specified Description: An improper authentication vulnerability exists in multiple printers and scanners that implement Web Based Management provided by BROTHER INDUSTRIES, LTD. This vulnerability can be...

PT-2024-19443 · Brother Industries · Brother Printers/Scanners

Name of the Vulnerable Software and Affected Versions: Brother printers and scanners affected versions not specified Description: A cross-site request forgery issue allows a remote unauthenticated attacker to perform unintended operations on the affected product. The vulnerability is present in...

Honeywell PM43 < P10.19.050004 - Remote Code Execution Exploit

Exploit Title: Honeywell PM43 ' if htmlstartindex != -1: return responsetext:htmlstartindex else: return responsetext except requests.exceptions.RequestException as e: return f"Error: e" def main: parser = argparse.ArgumentParserdescription='Command Injection PoC for Honeywell PM43 Printers'...

CVE-2024-2184

Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.:Satera MF740C Series/Satera MF640C...

CVE-2024-2184

Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.:Satera MF740C Series/Satera MF640C...

CVE-2024-2184

Buffer overflow in identifier field of WSD probe request process of Small Office Multifunction Printers and Laser Printers which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code.:Satera MF740C Series/Satera MF640C...

CVE-2024-2184

CVE-2024-2184 corresponds to a buffer overflow in the WSD probe request identifier field affecting Canon Small Office Multifunction Printers and various Color imageCLASS and i-SENSYS series. The vulnerability could allow a remote attacker on the network to cause the device to become unresponsive ...

Canon Small Office Multifunction Printers Security Vulnerability

Canon Small Office Multifunction Printers is a small office multifunction printer from Canon Japan. A security vulnerability exists in Canon Small Office Multifunction Printers and Laser Printers that originates from a buffer overflow issue. An attacker could exploit this vulnerability to cause t...

PT-2024-2219 · Canon +1 · C1127P +27

Name of the Vulnerable Software and Affected Versions: Canon i-SENSYS and Color imageCLASS series printers and multifunctional devices versions prior to firmware v12.07 and v03.09 Satera MF740C Series/Satera MF640C Series/Satera LBP660C Series/Satera LBP620C Series firmware v12.07 and earlier...

Multiple vulnerabilities in printers and scanners which implement BROTHER Web Based Management

Overview Multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. contain multiple vulnerabilities listed below. Improper Authentication CWE-287 - CVE-2024-21824 Cross-Site Request Forgery CWE-352 - CVE-2024-22475 Hiroki Yasui, Yudai Morii, Takaya...