CVE-2019-13192: brother ads-2400n_firmware Out-of-bounds Write
Vulnerability summary
CVE-2019-13192 is a high (CVSS 10.0) Out-of-bounds Write vulnerability in brother ads-2400n_firmware. EPSS estimates a 3.82% chance of exploitation in the next 30 days, higher than 89.9% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 13-03-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Some Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow vulnerability as the IPP service did not parse attribute names properly. This would allow an attacker to execute arbitrary code on the device.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.82%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.82% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (nccgroup.trust)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Brother200 products
- ads-2400n_firmwarena
- ads-2800w_firmwarena
- ads-3000n_firmwarena
- ads-3600w_firmwarena
- dcp-1610w_firmwarena
1 vendor · 200 products · Showing 200 of 300. Use Open JSON for the complete list.
References
3 links- www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-brother-printers/X Refsource MISCExploitThird Party Advisory
- support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00100670_000X Refsource MISCVendor Advisory