Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
http://support.brother.co.jp/j/s/support/vul_info/JVN95996423/index.html | vendor advisory |
http://jvn.jp/en/jp/JVN95996423/index.html | third party advisory |