Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2024-51979 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631). The malformed request will contain an empty Origin header value and a malformed Referer header value. The Referer header value will trigger a stack based buffer overflow when the host value in the Referer header is processed and is greater than 64 bytes in length.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:7.2 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf	CISA-ADP	BundleExploitTechnical Analysis
https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf	[email protected]	BundleExploitTechnical Analysis
https://github.com/sfewer-r7/BrotherVulnerabilities	[email protected]	BundleSource Code
https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000	[email protected]	AdvisoryBundleRemedyVendor
https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000	[email protected]	AdvisoryBundleRemedyVendor
https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000	[email protected]	AdvisoryBundleRemedyVendor
https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html	[email protected]
https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf	[email protected]
https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed	[email protected]	AdvisoryBundleRemedy
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007	[email protected]

see all 10 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-121	Stack-based Buffer Overflow	[email protected]

Affected Products

Product	Versions
Brother MFC-L9570CDW	All versions
CPE cpe:2.3:h:brother:mfc-l9570cdw:::::::: cpe:2.3:o:brother:mfc-l9570cdw_firmware:::::::: Remediation Workaround:low effort Change the default administrator password. Upgrade: MAIN: ZL2403011354, SUB1: 1.32moderate effort
Brother DCP-L2530DW	All versions
CPE cpe:2.3:h:brother:dcp-l2530dw:::::::: cpe:2.3:o:brother:dcp-l2530dw_firmware:::::::: Remediation Workaround:low effort Change the default administrator password. Upgrade: MAIN: ZC2403082049, SUB1: 1.04moderate effort

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Jun 25, 2025	CVE Modified	[email protected]
Jun 25, 2025	CVE Modified	CISA-ADP
Jun 25, 2025	New CVE Received	[email protected]