Threat database

CVE-2025-55704 is a medium-severity vulnerability affecting multiple Brother Industries MFPs, involving hidden functionality that allows attackers to access device logs containing sensitive information. The flaw can be exploited remotely without authentication or user interaction, potentially exposing confidential data stored in logs. Although no known exploits are currently in the wild, the vulnerability's network accessibility and low attack complexity pose a risk to organizations using affected devices. European organizations relying on Brother MFPs for document management and printing could face information disclosure risks, impacting privacy and compliance. Mitigation requires vendor patches once available and restricting network access to MFP management interfaces. Countries with high adoption of Brother MFPs in critical sectors, such as Germany, France, and the UK, are most likely to be affected. Due to the limited impact on integrity and availability, and no authentication required, the severity is medium. Defenders should prioritize monitoring network access to MFPs and prepare for patch deployment to reduce exposure.

EPSS 0.3%VulnerabilityGermanyFrance+1

CVE-2025-53869 is a vulnerability in multiple Brother Industries MFP devices where improper server certificate validation allows a man-in-the-middle attacker to replace the device's root certificate store with arbitrary certificates. This flaw does not impact confidentiality or availability directly but can lead to integrity issues by enabling attackers to intercept or manipulate communications. The vulnerability has a CVSS score of 3.7 (low severity) due to the high attack complexity and lack of authentication or user interaction requirements. No known exploits are currently reported in the wild. European organizations using affected Brother MFPs should be aware of this risk, especially those in sectors with sensitive document handling. Mitigation involves applying vendor patches once available and restricting network access to MFP management interfaces. Countries with high Brother MFP market penetration and strong reliance on secure document workflows, such as Germany, France, and the UK, are most likely to be impacted.

EPSS 0.2%VulnerabilityGermanyFrance+1

Android App "Brother iPrint&Scan" versions 6.13.7 and earlier improperly uses an external cache directory. If exploited, application-specific files may be accessed from other malicious applications.

Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. If exploited, an arbitrary program may be executed with the administrative privilege. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].