Vulnerability Description
Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parse the cookie value properly. This would allow an attacker to execute arbitrary code on the device.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Brother | Ads-2400N Firmware | - |
| Brother | Ads-2400N | - |
| Brother | Ads-2800W Firmware | - |
| Brother | Ads-2800W | - |
| Brother | Ads-3000N Firmware | - |
| Brother | Ads-3000N | - |
| Brother | Ads-3600W Firmware | - |
| Brother | Ads-3600W | - |
| Brother | Dcp-1610W Firmware | - |
| Brother | Dcp-1610W | - |
| Brother | Dcp-1610We Firmware | - |
| Brother | Dcp-1610We | - |
| Brother | Dcp-1610Wr Firmware | - |
| Brother | Dcp-1610Wr | - |
| Brother | Dcp-1610Wvb Firmware | - |
| Brother | Dcp-1610Wvb | - |
| Brother | Dcp-1612W Firmware | - |
| Brother | Dcp-1612W | - |
| Brother | Dcp-1612We Firmware | - |
| Brother | Dcp-1612We | - |
Related Weaknesses (CWE)
References
- https://global.brotherVendor Advisory
- https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00Vendor Advisory
- https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabiExploitThird Party Advisory
- https://global.brotherVendor Advisory
- https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00Vendor Advisory
- https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabiExploitThird Party Advisory
FAQ
What is CVE-2019-13193?
CVE-2019-13193 is a vulnerability with a CVSS score of 8.8 (HIGH). Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow vulnerability as the web server did not parse the cookie value properly. This would allow an attacker to ...
How severe is CVE-2019-13193?
CVE-2019-13193 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-13193?
Check the references section above for vendor advisories and patch information. Affected products include: Brother Ads-2400N Firmware, Brother Ads-2400N, Brother Ads-2800W Firmware, Brother Ads-2800W, Brother Ads-3000N Firmware.