Brother Iprint&scan vulnerabilities

2 CVEs affecting Brother Iprint&scan, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-51654, published 2023-12-26.

More from Brother.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-28369, published 2023-05-18. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Brother iPrint&Scan V6.11.2 and earlier contains an improper access control vulnerability. This vulnerability may be exploited by the other app installed on the victim user's Android device, which…
• CVE-2023-51654, published 2023-12-26. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by a malicious user may cause a…