CVE-2024-51977
Published: 25 June 2025
Summary
CVE-2024-51977 is a medium-severity Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) vulnerability in Brother (inferred from references). Its CVSS base score is 5.3 (Medium).
Operationally, ranked in the top 2.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
An information disclosure vulnerability tracked as CVE-2024-51977 affects certain Brother devices and allows unauthenticated network access to the URI path /etc/mnt_info.csv. The flaw can be triggered via a simple GET request against the HTTP service on TCP port 80, the HTTPS service on TCP port 443, or the IPP service on TCP port 631. The response returns a CSV table that includes the device model, firmware version, IP address, and serial number. The issue carries a CVSS 5.3 score and is categorized under CWE-538.
An attacker who can reach any of the three listed services can exploit the vulnerability without credentials or user interaction, obtaining device-identifying information that supports reconnaissance or targeted follow-on attacks.
Public references include Brother support pages that address the affected products and remediation steps, a vulnerability disclosure whitepaper, and detection templates such as the Nuclei template for CVE-2024-51977.
The EPSS score stands at 0.4868 with no indicated change from its peak value.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-54705
Vulnerability details
An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive information from a vulnerable device. The URI path…
more
/etc/mnt_info.csv can be accessed via a GET request and no authentication is required. The returned result is a comma separated value (CSV) table of information. The leaked information includes the device’s model, firmware version, IP address, and serial number.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Pre- and post-publication reviews prevent insertion of sensitive information into externally-accessible public locations.
Monitors for sensitive information placed in externally accessible files or directories.
The map shows if data actions result in sensitive information being placed in externally accessible locations.
Isolation and eradication reduce the ability to exploit sensitive information inserted into externally-accessible files or directories.
Approved categorization forces identification of externally accessible files that contain sensitive content so they receive proper protection.
The pre-implementation review identifies externally accessible files or directories containing PII and drives access restrictions or removal.
Tainting makes it possible to determine when sensitive data has been removed from externally accessible files or directories.
OPSEC practices stop placement of supply-chain information into locations accessible to external parties.