Search
Find a vulnerability
Search criteria
3 vulnerabilities found for Aficio SP 3500SF by Ricoh
CVE-2026-101040 (GCVE-0-2026-101040)
Vulnerability from nvd – Published: 2026-09-28 11:00 – Updated: 2026-10-01 14:13
VLAI
EPSS
VEX
Title
Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service
Summary
A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 14:13 UTC
CWE
- CWE-404 - Denial of Service
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/410908 | vdb-entry |
| https://vuldb.com/vuln/410908/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-101040 | third-party-advisory |
| https://vuldb.com/submit/927274 | third-party-advisory |
| https://vuldb.com/submit/927275 | third-party-advisory |
| https://vuldb.com/submit/927289 | third-party-advisory |
| https://vuldb.com/submit/927478 | third-party-advisory |
| https://github.com/xiaobor123/vuls-find-VxWorks/t… | related |
| https://github.com/xiaobor123/vuls-find-VxWorks/b… | exploit |
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Ricoh | SP 330DN |
Affected:
20260813
cpe:2.3:a:ricoh:sp_330dn:*:*:*:*:*:*:*:* |
|
| Ricoh | SP 221 |
Affected:
20260813
cpe:2.3:a:ricoh:sp_221:*:*:*:*:*:*:*:* |
|
| Ricoh | SP C252SF |
Affected:
20260813
cpe:2.3:a:ricoh:sp_c252sf:*:*:*:*:*:*:*:* |
|
| Ricoh | Aficio SP 3500SF |
Affected:
20260813
cpe:2.3:a:ricoh:aficio_sp_3500sf:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-101040",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T14:13:30.430729Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T14:13:40.410Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ricoh:sp_330dn:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "SP 330DN",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
},
{
"cpes": [
"cpe:2.3:a:ricoh:sp_221:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "SP 221",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
},
{
"cpes": [
"cpe:2.3:a:ricoh:sp_c252sf:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "SP C252SF",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
},
{
"cpes": [
"cpe:2.3:a:ricoh:aficio_sp_3500sf:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "Aficio SP 3500SF",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xiaobor123 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.8,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-404",
"description": "Denial of Service",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-28T11:00:13.020Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-410908 | Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/410908"
},
{
"name": "VDB-410908 | CTI Indicators (IOB, IOC, TTP)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/410908/cti"
},
{
"name": "CVE-2026-101040 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-101040"
},
{
"name": "Submit #927274 | RICOH RICOH SP 330DN V1.11 Denial of Service",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927274"
},
{
"name": "Submit #927275 | RICOH SP 221 V1.02 Denial of Service (Duplicate)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927275"
},
{
"name": "Submit #927289 | RICOH SP C252SF V1.17 Denial of Service (Duplicate)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927289"
},
{
"name": "Submit #927478 | RICOH Aficio SP 3500SF V2.14 Stack-based Buffer Overflow (Duplicate)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927478"
},
{
"tags": [
"related"
],
"url": "https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/RICOH/03-SP330DN-multipart-parser-infinite-loop"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/xiaobor123/vuls-find-VxWorks/blob/main/RICOH/03-SP330DN-multipart-parser-infinite-loop/poc.py"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-27T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-27T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-28T11:53:59.000Z",
"value": "VulDB entry last update"
}
],
"title": "Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-101040",
"datePublished": "2026-09-28T11:00:13.020Z",
"dateReserved": "2026-09-27T14:33:04.218Z",
"dateUpdated": "2026-10-01T14:13:40.410Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-101040 (GCVE-0-2026-101040)
Vulnerability from cvelistv5 – Published: 2026-09-28 11:00 – Updated: 2026-10-01 14:13
VLAI
EPSS
VEX
Title
Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service
Summary
A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 14:13 UTC
CWE
- CWE-404 - Denial of Service
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/410908 | vdb-entry |
| https://vuldb.com/vuln/410908/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-101040 | third-party-advisory |
| https://vuldb.com/submit/927274 | third-party-advisory |
| https://vuldb.com/submit/927275 | third-party-advisory |
| https://vuldb.com/submit/927289 | third-party-advisory |
| https://vuldb.com/submit/927478 | third-party-advisory |
| https://github.com/xiaobor123/vuls-find-VxWorks/t… | related |
| https://github.com/xiaobor123/vuls-find-VxWorks/b… | exploit |
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Ricoh | SP 330DN |
Affected:
20260813
cpe:2.3:a:ricoh:sp_330dn:*:*:*:*:*:*:*:* |
|
| Ricoh | SP 221 |
Affected:
20260813
cpe:2.3:a:ricoh:sp_221:*:*:*:*:*:*:*:* |
|
| Ricoh | SP C252SF |
Affected:
20260813
cpe:2.3:a:ricoh:sp_c252sf:*:*:*:*:*:*:*:* |
|
| Ricoh | Aficio SP 3500SF |
Affected:
20260813
cpe:2.3:a:ricoh:aficio_sp_3500sf:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-101040",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T14:13:30.430729Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T14:13:40.410Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ricoh:sp_330dn:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "SP 330DN",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
},
{
"cpes": [
"cpe:2.3:a:ricoh:sp_221:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "SP 221",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
},
{
"cpes": [
"cpe:2.3:a:ricoh:sp_c252sf:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "SP C252SF",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
},
{
"cpes": [
"cpe:2.3:a:ricoh:aficio_sp_3500sf:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "Aficio SP 3500SF",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xiaobor123 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.8,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-404",
"description": "Denial of Service",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-28T11:00:13.020Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-410908 | Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/410908"
},
{
"name": "VDB-410908 | CTI Indicators (IOB, IOC, TTP)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/410908/cti"
},
{
"name": "CVE-2026-101040 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-101040"
},
{
"name": "Submit #927274 | RICOH RICOH SP 330DN V1.11 Denial of Service",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927274"
},
{
"name": "Submit #927275 | RICOH SP 221 V1.02 Denial of Service (Duplicate)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927275"
},
{
"name": "Submit #927289 | RICOH SP C252SF V1.17 Denial of Service (Duplicate)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927289"
},
{
"name": "Submit #927478 | RICOH Aficio SP 3500SF V2.14 Stack-based Buffer Overflow (Duplicate)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927478"
},
{
"tags": [
"related"
],
"url": "https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/RICOH/03-SP330DN-multipart-parser-infinite-loop"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/xiaobor123/vuls-find-VxWorks/blob/main/RICOH/03-SP330DN-multipart-parser-infinite-loop/poc.py"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-27T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-27T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-28T11:53:59.000Z",
"value": "VulDB entry last update"
}
],
"title": "Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-101040",
"datePublished": "2026-09-28T11:00:13.020Z",
"dateReserved": "2026-09-27T14:33:04.218Z",
"dateUpdated": "2026-10-01T14:13:40.410Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
VAR-202202-1057
Vulnerability from variot - Updated: 2024-08-14 14:11RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpa_supplicant.conf. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data. plural RICOH Printer SP series products contain an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202202-1057",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sp 330sn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 320sfn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 325sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 212w",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 377snwx",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 221snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 377dnwx",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 310dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 220snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp c260sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c250dn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 330sfn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c261sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 221sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 277snwx",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 212sfw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 312sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "m 320f",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 330sn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "p 310",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 325dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "aficio sp 3500sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp c260dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c262dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 277sfnwx",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 311dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 221snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 325sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "p 311",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 220snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 221sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 212nw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 213suw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 277nwx",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 312dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 310sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 325snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "m c2000",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c250sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "m 2701",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252dn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 212snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 220sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 325dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "m 2700",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 213w",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "m 320fb",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "m c250fwb",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 213sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 212suw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "m c250fw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c262sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 330dn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 377sfnwx",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "p c300w",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c261dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 325snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 311sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 3710sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 3710dn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 220sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 221sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 220nw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "p c301w",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 213snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 221s",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 212sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 213sfw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 221nw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "m 320",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 320sn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 213nw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 320dn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 221s",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 330sn",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 325dnw",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 220snw",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 320sn",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 320dn",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "aficio sp 3500sf",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 325snw",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 325sfnw",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 320sfn",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"cve": "CVE-2021-33945",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2021-33945",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2021-33945",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2021-33945",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2021-33945",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2021-33945",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNNVD",
"id": "CNNVD-202202-1296",
"trust": 0.6,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"db": "CNNVD",
"id": "CNNVD-202202-1296"
},
{
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpa_supplicant.conf. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data. plural RICOH Printer SP series products contain an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state",
"sources": [
{
"db": "NVD",
"id": "CVE-2021-33945"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
}
],
"trust": 1.62
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2021-33945",
"trust": 3.2
},
{
"db": "JVNDB",
"id": "JVNDB-2021-018538",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-202202-1296",
"trust": 0.6
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"db": "CNNVD",
"id": "CNNVD-202202-1296"
},
{
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"id": "VAR-202202-1057",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VARIoT devices database",
"id": null
}
],
"trust": 0.5948718
},
"last_update_date": "2024-08-14T14:11:00.215000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Update",
"trust": 0.8,
"url": "https://www.ricoh.com/info/2022/0228_1"
},
{
"title": "wpa_supplicant Buffer error vulnerability fix",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=184142"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"db": "CNNVD",
"id": "CNNVD-202202-1296"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-787",
"trust": 1.0
},
{
"problemtype": "Out-of-bounds writing (CWE-787) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "https://github.com/ainevsia/cve-request/tree/main/ricoh/1"
},
{
"trust": 1.6,
"url": "https://www.ricoh.com/info/2022/0228_1/"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2021-33945"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"db": "CNNVD",
"id": "CNNVD-202202-1296"
},
{
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"db": "CNNVD",
"id": "CNNVD-202202-1296"
},
{
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-06-21T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"date": "2022-02-15T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202202-1296"
},
{
"date": "2022-02-15T20:15:07.407000",
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-06-21T03:28:00",
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"date": "2022-03-10T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202202-1296"
},
{
"date": "2022-05-11T14:24:49.947000",
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202202-1296"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural \u00a0RICOH\u00a0Printer\u00a0SP\u00a0 series product out-of-bounds write vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202202-1296"
}
],
"trust": 0.6
}
}