Low severity · published May 18, 2023
CVE-2023-28369
Brother iPrint&Scan V6.11.2 and earlier contains an improper access control vulnerability
3.3
CVSS
0.2%
EPSS
No
On KEV
Description
Brother iPrint&Scan V6.11.2 and earlier contains an improper access control vulnerability. This vulnerability may be exploited by the other app installed on the victim user's Android device, which may lead to displaying the settings and/or log information of the affected app as a print preview.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Iprint&scan · Brother
before 6.11.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-28369
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-28369
Vendor Advisory
https://faq.brother.co.jp/app/answers/detail/a_id/13468
Third Party Advisory
https://jvn.jp/en/vu/JVNVU97891206/
Product
https://play.google.com/store/apps/details?id=com.brother.mfc.brprint
Product
https://support.brother.com/g/b/link.aspx?prod=group2&faqid=faq00100794_000
More from Iprint&scan
5.5
CVE-2023-51654
Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier