This vulnerability (CVE-2024-51984) affects Brother Industries HL-L8260CDN printers and involves insufficient protection of stored credentials for external services. An authenticated attacker can reconfigure the device to use an external LDAP or FTP service controlled by the attacker. When the device attempts to authenticate to this attacker-controlled service using existing stored credentials, the plaintext password is disclosed to the attacker. The CVSS 3.1 base score is 6.8 (medium severity) with network attack vector, low attack complexity, high privileges required, no user interaction, scope changed, and high confidentiality impact. No patch or official remediation level has been published, and no known exploits are reported in the wild.

An attacker with authentication access to the device can obtain plaintext credentials for external services configured on the printer by forcing the device to authenticate to an attacker-controlled service. This leads to credential disclosure and potential compromise of those external services. The confidentiality impact is high, but integrity and availability are not affected. The vulnerability requires attacker authentication and has low complexity to exploit once authenticated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict authenticated access to the device to trusted administrators only and avoid storing sensitive external service credentials on the device if possible. Monitor for any updates from Brother Industries regarding patches or mitigations.