Vulnerability Description
Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to execute arbitrary code on the device.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Brother | Ads-2400N Firmware | - |
| Brother | Ads-2400N | - |
| Brother | Ads-2800W Firmware | - |
| Brother | Ads-2800W | - |
| Brother | Ads-3000N Firmware | - |
| Brother | Ads-3000N | - |
| Brother | Ads-3600W Firmware | - |
| Brother | Ads-3600W | - |
| Brother | Dcp-1610W Firmware | - |
| Brother | Dcp-1610W | - |
| Brother | Dcp-1610We Firmware | - |
| Brother | Dcp-1610We | - |
| Brother | Dcp-1610Wr Firmware | - |
| Brother | Dcp-1610Wr | - |
| Brother | Dcp-1610Wvb Firmware | - |
| Brother | Dcp-1610Wvb | - |
| Brother | Dcp-1612W Firmware | - |
| Brother | Dcp-1612W | - |
| Brother | Dcp-1612We Firmware | - |
| Brother | Dcp-1612We | - |
Related Weaknesses (CWE)
References
- https://global.brotherVendor Advisory
- https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00Vendor Advisory
- https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabiExploitThird Party Advisory
- https://global.brotherVendor Advisory
- https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00Vendor Advisory
- https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabiExploitThird Party Advisory
FAQ
What is CVE-2019-13192?
CVE-2019-13192 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to e...
How severe is CVE-2019-13192?
CVE-2019-13192 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-13192?
Check the references section above for vendor advisories and patch information. Affected products include: Brother Ads-2400N Firmware, Brother Ads-2400N, Brother Ads-2800W Firmware, Brother Ads-2800W, Brother Ads-3000N Firmware.