CVE-2024-51982CWE-1286

Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh.

High · published June 25, 2025

CVSS v3.1

7.5

EPSS

11%

Percentile

95.8

In the wild

Unconfirmed

What it is

An unauthenticated attacker who can connect to TCP port 9100 can issue a Printer Job Language (PJL) command that will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device. A malformed PJL variable FORMLINES is set to a non number value causing the target to crash.

The record

Technical detail

CVSS v3.1: 7.5 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.10742 · 95.8th percentile
Weakness: CWE-1286 · Improper Validation of Syntactic Correctness of Input
Published: 2025-06-25T07:25Z

EPSS history

Timeline

25 JUN 07:25Z
Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh.
cvelistv5