Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure…
Priority LOW 38CWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-200.
Summary
Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure vulnerability which allows remote attackers to view sensitive information from referrer logs due to inadequate handling of HTTP referrer headers.
Why it matters now
EPSS 0.0258 85th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:brother:mfc-9970cdw_firmware:1.10:*:*:*:*:*:*:* | 1.10 | Vulnerable | Brother Industries, Ltd |
| cpe:2.3:h:brother:mfc-9970cdw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Brother Industries, Ltd |
- cpe:2.3:o:brother:mfc-9970cdw_firmware:1.10:*:*:*:*:*:*:* Versions 1.10 Vulnerable ·Brother Industries, Ltd
- cpe:2.3:h:brother:mfc-9970cdw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Brother Industries, Ltd
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2013-2674
- 2026-10-03 Alias added: GHSA-4m9p-c36q-62gp
References
More Brother Industries, Ltd Mfc-9970cdw Firmware vulnerabilities
- TI-2013-02339 Brother MFC-9970CDW 1.10 firmware L devices contain an information disclosure… CVSS 3.1HIGH 7.5
- TI-2013-02335 Brother MFC-9970CDW devices with firmware 0D allow cleartext submission of passwords. CVSS 3.1HIGH 7.5
- TI-2013-02338 Brother MFC-9970CDW 1.10 devices with Firmware L contain a Frameable response… CVSS 3.1MEDIUM 6.5
- TI-2013-02336 Brother MFC-9970CDW 1.10 firmware L devices contain a security bypass vulnerability which… CVSS 3.1MEDIUM 6.8
- TI-2013-02333 Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware… CVSS 2.0MEDIUM 4.3
- TI-2013-02247 Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer… CVSS 2.0MEDIUM 4.3
Sources
- CVE-2013-2674 · CVE Program
- CVE-2013-2674 · NVD
- FIRST EPSS
- GHSA-4m9p-c36q-62gp · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences