Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-16249

The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until eventually replying (~300 seconds) with an HTTP 500 error. While the server is hung, print jobs over the network are blocked and the web interface is inaccessible. An attacker can continuously send this malformed request to keep the device inaccessible to legitimate traffic.

Published

2017-11-10T02:29:18.607

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

6.9

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	brother	dcp-j132w_firmware	≤ 1.20	Yes
Hardware	brother	dcp-j132w	-	No

References

http://packetstormsecurity.com/files/144908/Debut-Embedded-httpd-1.20-Denial-Of-Service.html Exploit, Third Party Advisory, VDB Entry ([email protected])
https://www.exploit-db.com/exploits/43119/ Exploit, Third Party Advisory, VDB Entry ([email protected])
https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-017/?fid=10211 Exploit, Third Party Advisory ([email protected])
https://www.trustwave.com/Resources/SpiderLabs-Blog/Denial-of-Service-Vulnerability-in-Brother-Printers/?page=1&year=0&month=0&LangType=1033 Third Party Advisory ([email protected])
http://packetstormsecurity.com/files/144908/Debut-Embedded-httpd-1.20-Denial-Of-Service.html Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/43119/ Exploit, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2017-017/?fid=10211 Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.trustwave.com/Resources/SpiderLabs-Blog/Denial-of-Service-Vulnerability-in-Brother-Printers/?page=1&year=0&month=0&LangType=1033 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)