CVE-2013-2670: Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1...

Security readout for executives and security teams

CVE-2013-2670 is a cross-site scripting flaw in the Brother MFC-9970CDW printer web administration interface. A reachable management page could reflect attacker-controlled script or HTML. Business urgency depends mainly on whether these printers still exist and whether their admin interfaces are exposed to users or untrusted networks. Exposure is likely limited to organizations still operating Brother MFC-9970CDW devices with the named firmware and accessible web administration. Risk increases if printer admin pages are reachable from user networks, guest networks, VPN users, or the internet. Treat this as a legacy device hygiene issue unless exposure is broad. Prioritize discovery and network restriction first. Escalate if affected printers are internet-facing, shared with guest networks, or cannot be patched or retired. Mitigation focus: Identify and isolate any Brother MFC-9970CDW printers with web administration enabled.; Check Brother or support-channel guidance for firmware updates or retirement advice.; Restrict printer administration to trusted management networks only..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.