CVE-2024-51980: brother industries, ltd ads-2400n Server-Side Request Forgery (SSRF)
Vulnerability summary
CVE-2024-51980 is a medium (CVSS 5.3) Server-Side Request Forgery (SSRF) vulnerability in brother industries, ltd ads-2400n. EPSS estimates a 1.02% chance of exploitation in the next 30 days, higher than 63.1% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 25-06-2025PublishedVulnerability first disclosed.
- 07-04-2026Last modifiedVulnerability information updated.
Description
An unauthenticated attacker may perform a limited server side request forgery (SSRF), forcing the target device to open a TCP connection to an arbitrary port number on an arbitrary IP address. This SSRF leverages the WS-Addressing ReplyTo element in a Web service (HTTP TCP port 80) SOAP request. The attacker can not control the data sent in the SSRF connection, nor can the attacker receive any data back. This SSRF is suitable for TCP port scanning of an internal network when the Web service (HTTP TCP port 80) is exposed across a network segment.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST5.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS trend
Probability
1.02%
Chance of exploitation in the next 30 days
Percentile
63%
Versus all other CVEs
30-day change
+0.04 pp
From 0.99% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundBrothervulnerabilities
Maturity: poc
Weaknesses
CWE · root causeAffected systems
1 vendor · 200 products · Showing 200 of 707. Use Open JSON for the complete list.
References
10 links- www.toshibatec.com/information/20250625_02.htmlVendor Advisory
- www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixedThird Party Advisory
- assets.contentstack.io/v3/…Technical Description