CVE-2017-16249: brother dcp-j132w_firmware
Vulnerability summary
CVE-2017-16249 is a high (CVSS 7.8) vulnerability in brother dcp-j132w_firmware. EPSS estimates a 59.39% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 09-11-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying (~300 seconds) with an HTTP 500 error. While the server is hung, print jobs over the network are blocked and the web interface is inaccessible. An attacker can continuously send this malformed request to keep the device inaccessible to legitimate traffic.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
59.39%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 59.39% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (trustwave.com)
Maturity: unknown
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
Debut Embedded HTTPd 1.20 - Denial of Service
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Brother1 product
- dcp-j132w_firmware≤ 1.20
1 vendor · 1 product
References
4 links- www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-017/?fid=10211X Refsource MISCExploitThird Party Advisory
- packetstormsecurity.com/files/144908/Debut-Embedded-httpd-1.20-Denial-Of-Service.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry