This vulnerability (CVE-2024-51981) involves a blind SSRF in Brother Industries HL-L8260CDN printers caused by a CRLF injection vulnerability. The flaw exists in the WS-Addressing feature used during WS-Eventing subscription SOAP operations, enabling an unauthenticated attacker to craft and send arbitrary HTTP requests from the device. The attacker controls all HTTP data sent but cannot observe the response, limiting the impact to request initiation without data exfiltration. The CVSS 3.1 base score is 5.3, reflecting medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality impact.

An unauthenticated attacker can cause the affected device to send arbitrary HTTP requests to internal or external systems, potentially enabling indirect interaction with internal network resources or triggering unintended actions. However, the attacker cannot receive response data, which limits the ability to extract information or confirm the success of the attack. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been published, organizations should monitor Brother Industries advisories for updates. Until a patch is available, restricting network access to the device and limiting exposure of the WS-Eventing service may reduce risk.