Brother Industries Ltd Ads-1350W vulnerabilities

CVE-2024-51977 [MEDIUM] CWE-538 CVE-2024-51977: An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mnt_info.csv can be accessed via a GET request and no authentication is required. The returned result is a c

CVE-2024-51983 [HIGH] CWE-1286 CVE-2024-51983: An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken value which will crash the target device. The device will reboot, after which the attacker can reissue the command to repeatedly crash the device.