CVE-2024-51984: brother industries, ltd ads-1700w Insufficiently Protected Credentials
Vulnerability summary
CVE-2024-51984 is a medium (CVSS 6.8) Insufficiently Protected Credentials vulnerability in brother industries, ltd ads-1700w. EPSS estimates a 1.00% chance of exploitation in the next 30 days, higher than 62.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 25-06-2025PublishedVulnerability first disclosed.
- 07-04-2026Last modifiedVulnerability information updated.
Description
An authenticated attacker can reconfigure the target device to use an external service (such as LDAP or FTP) controlled by the attacker. If an existing password is present for an external service, the attacker can force the target device to authenticate to an attacker controlled device using the existing credentials for that external service. In the case of an external LDAP or FTP service, this will disclose the plaintext password for that external service to the attacker.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST6.8MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS trend
Probability
1.00%
Chance of exploitation in the next 30 days
Percentile
62%
Versus all other CVEs
30-day change
+0.04 pp
From 0.96% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundBrothervulnerabilities
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Brother industries, ltd200 products
- ads-1700w≤ R(3.75)
- ads-1800w≤ C(1.06)
- ads-2400n≤ T
- ads-2700w≤ M(4.28)
- ads-2700we≤ P(2.28)
1 vendor · 200 products · Showing 200 of 743. Use Open JSON for the complete list.
References
10 links- www.toshibatec.com/information/20250625_02.htmlVendor Advisory
- www.rapid7.com/blog/post/multiple-brother-devices-multiple-vulnerabilities-fixedThird Party Advisory
- assets.contentstack.io/v3/…Technical Description