CVE-2024-51977

CVE-2024-51977 is an information disclosure vulnerability affecting numerous Brother printer models, allowing an unauthenticated attacker to retrieve sensitive device information. An attacker can exploit this by making a GET request to a specific URI path on the device's HTTP, HTTPS, or IPP services, bypassing authentication. The vulnerability has a CVSS score of 5.3 (Medium), indicating low attack complexity and no user interaction, but only a low impact on confidentiality. While not listed in CISA's KEV catalog, exploit intelligence shows available Metasploit modules and Nuclei templates, and it has garnered significant community discussion and media coverage, suggesting a high potential for exploitation.