CVE-2024-51982

Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh.

An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language (PJL) command that will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. A malformed PJL variable FORMLINES is set to a non number value causing the target to crash.

Affected

Brother Industries, Ltd · FUJIFILM Business Innovation · RICOH · HL-L8260CDN · HL-L8260CDW · HL-L8360CDW · HL-L8360CDWT · HL-L9310CDW · DCP-L8410CDW

CVSS v3.1 RAPID7

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

10.74% chance of exploitation in the next 30 days, 96th percentile

Published

2025-06-25

Updated

2026-04-02

Proof-of-concept exploits (1)

• sfewer-r7/BrotherVulnerabilities35★ · 2025-06-30

References

• CVE Record
• NVD entry

Related

• CVE-2023-27532
• CVE-2023-34362
• CVE-2024-51977
• CVE-2024-51978
• CVE-2024-51979
• CVE-2024-51980