Which products and versions are affected by CVE-2017-7588?

Affected: Ads Firmware (Brother); Dcp Firmware (Brother); Hl Firmware (Brother), among others. The full list is in the CVE brief.

Is CVE-2017-7588 being exploited in the wild?

It is not listed in any known-exploited vulnerabilities catalog.

Is CVE-2017-7588 in the CISA KEV catalog?

No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.

Is there a public exploit for CVE-2017-7588?

Public exploit code is available.

Is there a fix for CVE-2017-7588?

No fixed version is listed yet; check the vendor advisory for mitigations.

How urgently should CVE-2017-7588 be patched?

Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Request A Demo

WatchlistCritical

CVE-2017-7588Ads Firmware Authentication Bypass

On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt.

Published Apr 12, 2017 · Updated May 12, 2026

Key Facts

Patch immediately

CVE-2017-7588 is a critical-severity vulnerability (CVSS 9.8 v3) affecting Ads Firmware (Brother), Dcp Firmware (Brother), Hl Firmware (Brother) and 1 more product.
It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
EPSS estimates a 34% probability of exploitation in the next 30 days.
No fixed version is listed yet; check the vendor advisory for mitigations.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Scores

CVSS v3

9.8

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS (30-day exploit likelihood)

34%

Higher than 98.3% of all scored CVEs

Exploit maturity

Proof of concept

ATLAS score

37/100

Publication score, see How it works

Exploitation Verdict

KEV listed

Not listed

Federal due date

None

No federal due date

Ransomware use

Not reported

Attributed actors

None named

Exploit & Defence Guidance

Exploit maturity

Proof of concept

Public exploit code

Proof-of-concept links

In-the-wild evidence

Reports of active use

Description

On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt.

Affected models are: MFC-J6973CDW MFC-J4420DW MFC-8710DW MFC-J4620DW MFC-L8850CDW MFC-J3720 MFC-J6520DW MFC-L2740DW MFC-J5910DW MFC-J6920DW MFC-L2700DW MFC-9130CW MFC-9330CDW MFC-9340CDW MFC-J5620DW MFC-J6720DW MFC-L8600CDW MFC-L9550CDW MFC-L2720DW DCP-L2540DW DCP-L2520DW HL-3140CW HL-3170CDW HL-3180CDW HL-L8350CDW HL-L2380DW ADS-2500W ADS-1000W ADS-1500W.

Affected Products

4 affected entries in total

Product	Affected versions	Fixed in
Ads FirmwareBrother	See advisory	n/a
Dcp FirmwareBrother	See advisory	n/a
Hl FirmwareBrother	See advisory	n/a
Mfc FirmwareBrother	See advisory	n/a

Timeline

Publicly disclosed
Apr 12, 2017
Last updated
May 12, 2026

Weakness Type

CWE-287 Improper Authentication

References

FAQ

Common Questions.

On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt.
Affected: Ads Firmware (Brother); Dcp Firmware (Brother); Hl Firmware (Brother), among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
No fixed version is listed yet; check the vendor advisory for mitigations.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.

Is CVE-2017-7588 On Your Attack Surface?

Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.