CVE-2024-51982

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language (PJL) command that will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. A malformed PJL variable FORMLINES is set to a non number value causing the target to crash.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1286

Affected software

VendorProductVersions
Brother Industries, LtdHL-L8260CDN<= 1.65(ZH)
Brother Industries, LtdHL-L8260CDW<= 1.65(ZH)
Brother Industries, LtdHL-L8360CDW<= 1.68(ZG)
Brother Industries, LtdHL-L8360CDWT<= 1.68(ZG)
Brother Industries, LtdHL-L9310CDW<= 1.68(ZG)
Brother Industries, LtdDCP-L8410CDW<= ZK
Brother Industries, LtdMFC-L8610CDW<= ZK
Brother Industries, LtdMFC-L8690CDW<= ZK
Brother Industries, LtdMFC-L8900CDW<= ZM
Brother Industries, LtdMFC-L9570CDW<= ZM
Brother Industries, LtdMFC-L9577CDW<= ZM
Brother Industries, LtdHL-L2325DW<= 1.74(ZE)
Brother Industries, LtdHL-L2350DW<= 1.74(ZE)
Brother Industries, LtdHL-L2351DW<= 1.74(ZE)
Brother Industries, LtdHL-L2352DW<= 1.74(ZE)
Brother Industries, LtdHL-L2357DW<= 1.74(ZE)
Brother Industries, LtdHL-L2370DN<= 1.74(ZE)
Brother Industries, LtdHL-L2371DN<= 1.74(ZE)
Brother Industries, LtdHL-L2372DN<= 1.74(ZE)
Brother Industries, LtdHL-2590DN<= 1.74(ZE)
Brother Industries, LtdHL-L2370DW<= 1.74(ZE)
Brother Industries, LtdHL-L2370DWXL<= 1.74(ZE)
Brother Industries, LtdHL-L2375DW<= 1.74(ZE)
Brother Industries, LtdHL-L2376DW<= 1.74(ZE)
Brother Industries, LtdHL-B2050DN<= 1.74(ZE)
Brother Industries, LtdHL-B2080DW<= 1.74(ZE)
Brother Industries, LtdHL-L2385DW<= 1.74(ZE)
Brother Industries, LtdHL-L2386DW<= 1.74(ZE)
Brother Industries, LtdHL-2595DW<= 1.74(ZE)
Brother Industries, LtdHL-L2350DWR<= 1.74(ZE)
Brother Industries, LtdHL-L2370DNR<= 1.74(ZE)
Brother Industries, LtdHL-L2375DWR<= 1.74(ZE)
Brother Industries, LtdHL-L2395DW<= ZC
Brother Industries, LtdMFC-L2730DW<= ZC
Brother Industries, LtdMFC-L2732DW<= ZC
Brother Industries, LtdMFC-L2750DW>= A, <= ZC
Brother Industries, LtdMFC-L2750DWXL<= ZC
Brother Industries, LtdMFC-L2751DW<= ZC
Brother Industries, LtdMFC-L2770DW<= ZC
Brother Industries, LtdMFC-L2771DW<= ZC
Brother Industries, LtdMFC-L2730DWR<= ZC
Brother Industries, LtdMFC-L2750DWR<= ZC
Brother Industries, LtdDCP-7195DW<= R
Brother Industries, LtdMFC-7895DW<= R
Brother Industries, LtdMFC-L2730DN<= R
Brother Industries, LtdHL-L2390DW<= ZC
Brother Industries, LtdDCP-L2530DW<= ZC
Brother Industries, LtdDCP-L2531DW<= ZC
Brother Industries, LtdDCP-L2532DW<= ZC
Brother Industries, LtdDCP-L2535DW>= A, <= ZC

References

Timeline

Published
Jun 25, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-519837.5An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unCVE-2024-519846.8An authenticated attacker can reconfigure the target device to use an external service (such as LDAP or FTP) controlled by the attacker. If CVE-2024-519875.4Duende.AccessTokenManagement.OpenIdConnect is a set of .NET libraries that manage OAuth and OpenId Connect access tokens. HTTP Clients creatCVE-2024-519886.5RabbitMQ is a feature rich, multi-protocol messaging and streaming broker. In affected versions queue deletion via the HTTP API was not veriCVE-2024-519897.1Password Pusher is an open source application to communicate sensitive information over the web. A cross-site scripting (XSS) vulnerability CVE-2024-51995.4The Spotify Play Button WordPress plugin through 1.0 does not validate and escape some of its shortcode attributes before outputting them baCVE-2024-519909.3jj, or Jujutsu, is a Git-compatible VCS written in rust. In affected versions specially crafted Git repositories can cause `jj` to write filCVE-2024-519914.9October is a Content Management System (CMS) and web platform. A vulnerability in versions prior to 3.7.5 affects authenticated administratoCVE-2024-519924.1Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards. TCVE-2024-519933.4Combodo iTop is a web based IT Service Management tool. An attacker accessing a backup file or the database can read some passwords for miscCVE-2024-519945.4Combodo iTop is a web based IT Service Management tool. In affected versions uploading a text file containing some java script in the portalCVE-2024-519957.1Combodo iTop is a web based IT Service Management tool. An attacker can request any `route` we want as long as we specify an `operation` tha
CVE-2024-51982: High severity, CVSS 7.5 | Vulnix