Riskcovery

CVE-2025-53869

State
Published
Severity
6.3 Medium
Published
Jan 29, 2026
Updated
Jan 29, 2026
Reserved
Nov 18, 2025

Read the record on cve.org

Description

Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a man-in-the-middle attacker to replace the set of root certificates used by the product with a set of arbitrary certificates.

Scores

CVSSScoreVectorSource
4.06.3 MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:Njpcert
3.13.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:Njpcert

Weaknesses

  • CWE-295 Improper certificate validation

Affected Products

ProductVersions
Multiple MFPsBrother Industries, Ltd.
  • see the information provided by the vendorAffected
Multiple MFPsKonica Minolta, Inc.
  • see the information provided by the vendorAffected
Multiple MFPsRicoh Company, Ltd.
  • see the information provided by the vendorAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.