Some Brother printers have a remote code execution vulnerability, and they can’t fix it
Some Brother printers have a remote code execution vulnerability, and they can’t fix it

Rapid7

Brother has indicated that this vulnerability cannot be fully remediated in firmware, and has required a change to the manufacturing process of all affected models.
So the fix for this "can't be fixed" issue is to change the default password yourself, which you should be doing anyway.
They should have a separate severity rating for "is this actually likely to impact admins who aren't complete idiots".