CVE-2024-21824

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If this vulnerability is exploited, a network-adjacent user who can access the product may impersonate an administrative user. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published: Mar 18, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-218259.8A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Co CVE-2024-218265.5in OpenHarmony v3.2.4 and prior versions allow a local attacker cause sensitive information leak through insecure storage.CVE-2024-218277.2A leftover debug code vulnerability exists in the cli_server debug functionality of Tp-Link ER7206 Omada Gigabit VPN Router 1.4.1 Build 2024 CVE-2024-218286.7Improper access control in some Intel(R) Ethernet Controller Administrative Tools software before version 28.3 may allow an authenticated us CVE-2024-218297.5Improper input validation in UEFI firmware error handler for some Intel(R) Processors may allow a privileged user to potentially enable esca CVE-2024-21835.4The Beaver Builder Addons by WPZOOM plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Heading widget in all versions CVE-2024-218306.7Uncontrolled search path in some Intel(R) VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalat CVE-2024-218317.8Uncontrolled search path in some Intel(R) Processor Diagnostic Tool software before version 4.1.9.41 may allow an authenticated user to pote CVE-2024-218323.5A potential JSON injection attack vector exists in PingFederate REST API data stores using the POST method and a JSON request body.CVE-2024-218338.8Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The CVE-2024-218345.5in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion.CVE-2024-218357.8Insecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may allow an authenticated user to potentially enable