An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631). The malformed request will contain an empty Origin header value and a malformed Referer header value. The Referer header value will trigger a stack based buffer overflow when the host value in the Referer header is processed and is greater than 64 bytes in length.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact total

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://assets.contentstack.io/v3/assets/blte4f029e766e6b253/blt6495b3c6adf2867f/685aa980a26c5e2b1026969c/vulnerability-disclosure-whitepaper.pdf cve-icon cve-icon cve-icon
https://github.com/sfewer-r7/BrotherVulnerabilities cve-icon cve-icon
https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100846_000 cve-icon cve-icon
https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100848_000 cve-icon cve-icon
https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faqp00100620_000 cve-icon cve-icon
https://www.fujifilm.com/fbglobal/eng/company/news/notice/2025/0625_announce.html cve-icon cve-icon
https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0001.pdf cve-icon cve-icon
https://www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixed cve-icon cve-icon
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000007 cve-icon cve-icon
History

Wed, 25 Jun 2025 14:15:00 +0000

Type Values Removed Values Added
Title Authenticated stack based buffer overflow affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and RICOH. Authenticated stack based buffer overflow affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Konica Minolta, Inc.
References

Wed, 25 Jun 2025 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 25 Jun 2025 07:30:00 +0000

Type Values Removed Values Added
Description An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631). The malformed request will contain an empty Origin header value and a malformed Referer header value. The Referer header value will trigger a stack based buffer overflow when the host value in the Referer header is processed and is greater than 64 bytes in length.
Title Authenticated stack based buffer overflow affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and RICOH.
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: rapid7

Published: 2025-06-25T07:20:29.048Z

Updated: 2025-06-25T14:08:48.280Z

Reserved: 2024-11-04T17:19:18.808Z

Link: CVE-2024-51979

cve-icon Vulnrichment

Updated: 2025-06-25T12:29:56.858Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-06-25T08:15:31.590

Modified: 2025-06-26T18:58:14.280

Link: CVE-2024-51979

cve-icon Redhat

No data.