{"schemaVersion":3,"id":"CVE-2024-22475","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Cross-site request forgery vulnerability in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. allows a remote unauthenticated attacker to perform unintended operations on the affected product. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].","dates":{"published":"2024-03-18T08:03:36.146Z","modified":"2024-10-27T21:26:34.557Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.1,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00282,"percentile":0.19608,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.00282},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00282,"percentile":0.19608}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00282,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00282,"percentile":0.19608}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-352","name":"Cross-Site Request Forgery (CSRF)","description":"The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.","type":"weakness","status":"Stable","abstraction":"Compound","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/352.html"}],"affected":[{"vendor":"brother industries, ltd.","product":"multiple printers and scanners","name":"Multiple printers and scanners","label":"multiple printers and scanners","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"see the information provided by the vendor","noFixRecorded":false,"fixedIn":null}],"versionsText":"see the information provided by the vendor","eol":null,"hubHref":"/vendor/brother_industries_ltd/multiple_printers_and_scanners"},{"vendor":"fujifilm business innovation corp.","product":"multiple printers and scanners","name":"Multiple printers and scanners","label":"multiple printers and scanners","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"see the information provided by the vendor","noFixRecorded":false,"fixedIn":null}],"versionsText":"see the information provided by the vendor","eol":null,"hubHref":"/vendor/fujifilm_business_innovation_corp/multiple_printers_and_scanners"},{"vendor":"ricoh company, ltd.","product":"multiple printers and scanners","name":"Multiple printers and scanners","label":"multiple printers and scanners","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"see the information provided by the vendor","noFixRecorded":false,"fixedIn":null}],"versionsText":"see the information provided by the vendor","eol":null,"hubHref":"/vendor/ricoh_company_ltd/multiple_printers_and_scanners"},{"vendor":"toshiba tec corporation","product":"multiple printers and scanners","name":"Multiple printers and scanners","label":"multiple printers and scanners","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"see the information provided by the vendor","noFixRecorded":false,"fixedIn":null}],"versionsText":"see the information provided by the vendor","eol":null,"hubHref":"/vendor/toshiba_tec_corporation/multiple_printers_and_scanners"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faqp00100601_000","label":"support.brother.com/g/b/link.aspx?prod=group2&faqid=faqp00100601_000","hostname":"support.brother.com","tags":[]},{"url":"https://support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faq00100823_000","label":"support.brother.com/g/b/link.aspx?prod=lmgroup1&faqid=faq00100823_000","hostname":"support.brother.com","tags":[]},{"url":"https://www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html","label":"www.fujifilm.com/fbglobal/eng/company/news/notice/2024/0306_2_announce.html","hostname":"www.fujifilm.com","tags":[]},{"url":"https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002","label":"www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000002","hostname":"www.ricoh.com","tags":[]},{"url":"https://www.toshibatec.com/information/20240306_01.html","label":"www.toshibatec.com/information/20240306_01.html","hostname":"www.toshibatec.com","tags":[]},{"url":"https://jvn.jp/en/jp/JVN82749078/","label":"jvn.jp/en/jp/JVN82749078/","hostname":"jvn.jp","tags":[]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2024-03-18T08:03:36.146Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-10-27T21:26:34.557Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":24,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T13:49:46.466Z","stale":false,"partial":false}}