Search

Find a vulnerability

Search criteria

    6 vulnerabilities found for SP 221 by Ricoh

    CVE-2026-101040 (GCVE-0-2026-101040)

    Vulnerability from nvd – Published: 2026-09-28 11:00 – Updated: 2026-10-01 14:13
    VLAI
    Title
    Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service
    Summary
    A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
    SSVC
    Exploitation: poc Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-01 14:13 UTC
    CWE
    Impacted products
    Vendor Product Version
    Ricoh SP 330DN Affected: 20260813
        cpe:2.3:a:ricoh:sp_330dn:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Ricoh SP 221 Affected: 20260813
        cpe:2.3:a:ricoh:sp_221:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Ricoh SP C252SF Affected: 20260813
        cpe:2.3:a:ricoh:sp_c252sf:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Ricoh Aficio SP 3500SF Affected: 20260813
        cpe:2.3:a:ricoh:aficio_sp_3500sf:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-101040",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-10-01T14:13:30.430729Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-10-01T14:13:40.410Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:ricoh:sp_330dn:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "HTTP Multipart Form-Data Parser"
              ],
              "product": "SP 330DN",
              "vendor": "Ricoh",
              "versions": [
                {
                  "status": "affected",
                  "version": "20260813"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:ricoh:sp_221:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "HTTP Multipart Form-Data Parser"
              ],
              "product": "SP 221",
              "vendor": "Ricoh",
              "versions": [
                {
                  "status": "affected",
                  "version": "20260813"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:ricoh:sp_c252sf:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "HTTP Multipart Form-Data Parser"
              ],
              "product": "SP C252SF",
              "vendor": "Ricoh",
              "versions": [
                {
                  "status": "affected",
                  "version": "20260813"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:ricoh:aficio_sp_3500sf:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "HTTP Multipart Form-Data Parser"
              ],
              "product": "Aficio SP 3500SF",
              "vendor": "Ricoh",
              "versions": [
                {
                  "status": "affected",
                  "version": "20260813"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "xiaobor123 (VulDB User)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "VulDB CNA Team"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 6.8,
                "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C/E:POC/RL:ND/RC:UR",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-404",
                  "description": "Denial of Service",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-28T11:00:13.020Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-410908 | Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service",
              "tags": [
                "vdb-entry"
              ],
              "url": "https://vuldb.com/vuln/410908"
            },
            {
              "name": "VDB-410908 | CTI Indicators (IOB, IOC, TTP)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/vuln/410908/cti"
            },
            {
              "name": "CVE-2026-101040 | CVE Analysis and Report",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/cve/CVE-2026-101040"
            },
            {
              "name": "Submit #927274 | RICOH RICOH SP 330DN V1.11 Denial of Service",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/927274"
            },
            {
              "name": "Submit #927275 | RICOH SP 221 V1.02 Denial of Service (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/927275"
            },
            {
              "name": "Submit #927289 | RICOH SP C252SF V1.17 Denial of Service (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/927289"
            },
            {
              "name": "Submit #927478 | RICOH Aficio SP 3500SF V2.14 Stack-based Buffer Overflow (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/927478"
            },
            {
              "tags": [
                "related"
              ],
              "url": "https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/RICOH/03-SP330DN-multipart-parser-infinite-loop"
            },
            {
              "tags": [
                "exploit"
              ],
              "url": "https://github.com/xiaobor123/vuls-find-VxWorks/blob/main/RICOH/03-SP330DN-multipart-parser-infinite-loop/poc.py"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-09-27T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2026-09-27T02:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2026-09-28T11:53:59.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service",
          "x_generator": [
            "VulDB PVTS v202609"
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2026-101040",
        "datePublished": "2026-09-28T11:00:13.020Z",
        "dateReserved": "2026-09-27T14:33:04.218Z",
        "dateUpdated": "2026-10-01T14:13:40.410Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-101040 (GCVE-0-2026-101040)

    Vulnerability from cvelistv5 – Published: 2026-09-28 11:00 – Updated: 2026-10-01 14:13
    VLAI
    Title
    Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service
    Summary
    A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
    SSVC
    Exploitation: poc Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-10-01 14:13 UTC
    CWE
    Impacted products
    Vendor Product Version
    Ricoh SP 330DN Affected: 20260813
        cpe:2.3:a:ricoh:sp_330dn:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Ricoh SP 221 Affected: 20260813
        cpe:2.3:a:ricoh:sp_221:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Ricoh SP C252SF Affected: 20260813
        cpe:2.3:a:ricoh:sp_c252sf:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Ricoh Aficio SP 3500SF Affected: 20260813
        cpe:2.3:a:ricoh:aficio_sp_3500sf:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-101040",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-10-01T14:13:30.430729Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-10-01T14:13:40.410Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:ricoh:sp_330dn:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "HTTP Multipart Form-Data Parser"
              ],
              "product": "SP 330DN",
              "vendor": "Ricoh",
              "versions": [
                {
                  "status": "affected",
                  "version": "20260813"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:ricoh:sp_221:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "HTTP Multipart Form-Data Parser"
              ],
              "product": "SP 221",
              "vendor": "Ricoh",
              "versions": [
                {
                  "status": "affected",
                  "version": "20260813"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:ricoh:sp_c252sf:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "HTTP Multipart Form-Data Parser"
              ],
              "product": "SP C252SF",
              "vendor": "Ricoh",
              "versions": [
                {
                  "status": "affected",
                  "version": "20260813"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:ricoh:aficio_sp_3500sf:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "HTTP Multipart Form-Data Parser"
              ],
              "product": "Aficio SP 3500SF",
              "vendor": "Ricoh",
              "versions": [
                {
                  "status": "affected",
                  "version": "20260813"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "xiaobor123 (VulDB User)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "VulDB CNA Team"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 6.8,
                "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C/E:POC/RL:ND/RC:UR",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-404",
                  "description": "Denial of Service",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-28T11:00:13.020Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-410908 | Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service",
              "tags": [
                "vdb-entry"
              ],
              "url": "https://vuldb.com/vuln/410908"
            },
            {
              "name": "VDB-410908 | CTI Indicators (IOB, IOC, TTP)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/vuln/410908/cti"
            },
            {
              "name": "CVE-2026-101040 | CVE Analysis and Report",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/cve/CVE-2026-101040"
            },
            {
              "name": "Submit #927274 | RICOH RICOH SP 330DN V1.11 Denial of Service",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/927274"
            },
            {
              "name": "Submit #927275 | RICOH SP 221 V1.02 Denial of Service (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/927275"
            },
            {
              "name": "Submit #927289 | RICOH SP C252SF V1.17 Denial of Service (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/927289"
            },
            {
              "name": "Submit #927478 | RICOH Aficio SP 3500SF V2.14 Stack-based Buffer Overflow (Duplicate)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/927478"
            },
            {
              "tags": [
                "related"
              ],
              "url": "https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/RICOH/03-SP330DN-multipart-parser-infinite-loop"
            },
            {
              "tags": [
                "exploit"
              ],
              "url": "https://github.com/xiaobor123/vuls-find-VxWorks/blob/main/RICOH/03-SP330DN-multipart-parser-infinite-loop/poc.py"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-09-27T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2026-09-27T02:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2026-09-28T11:53:59.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service",
          "x_generator": [
            "VulDB PVTS v202609"
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2026-101040",
        "datePublished": "2026-09-28T11:00:13.020Z",
        "dateReserved": "2026-09-27T14:33:04.218Z",
        "dateUpdated": "2026-10-01T14:13:40.410Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    VAR-202001-0767

    Vulnerability from variot - Updated: 2024-11-23 21:36

    Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2). Ricoh SP C250DN The device contains an authentication vulnerability.Information may be obtained. RICOH SP C250DN is a printer from Ricoh Japan.

    An information disclosure vulnerability exists in RICOH SP C250DN version 1.06. The vulnerability stems from configuration errors during the operation of the network system or product. An unauthorized attacker could use the vulnerability to obtain sensitive information about the affected component

    Show details on source website

    {
      "@context": {
        "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
        "affected_products": {
          "@id": "https://www.variotdbs.pl/ref/affected_products"
        },
        "configurations": {
          "@id": "https://www.variotdbs.pl/ref/configurations"
        },
        "credits": {
          "@id": "https://www.variotdbs.pl/ref/credits"
        },
        "cvss": {
          "@id": "https://www.variotdbs.pl/ref/cvss/"
        },
        "description": {
          "@id": "https://www.variotdbs.pl/ref/description/"
        },
        "exploit_availability": {
          "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
        },
        "external_ids": {
          "@id": "https://www.variotdbs.pl/ref/external_ids/"
        },
        "iot": {
          "@id": "https://www.variotdbs.pl/ref/iot/"
        },
        "iot_taxonomy": {
          "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
        },
        "patch": {
          "@id": "https://www.variotdbs.pl/ref/patch/"
        },
        "problemtype_data": {
          "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
        },
        "references": {
          "@id": "https://www.variotdbs.pl/ref/references/"
        },
        "sources": {
          "@id": "https://www.variotdbs.pl/ref/sources/"
        },
        "sources_release_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
        },
        "sources_update_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
        },
        "threat_type": {
          "@id": "https://www.variotdbs.pl/ref/threat_type/"
        },
        "title": {
          "@id": "https://www.variotdbs.pl/ref/title/"
        },
        "type": {
          "@id": "https://www.variotdbs.pl/ref/type/"
        }
      },
      "@id": "https://www.variotdbs.pl/vuln/VAR-202001-0767",
      "affected_products": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "model": "sp c250dn",
            "scope": "eq",
            "trust": 1.4,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "m c250fw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp 277sfnwx",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp c250dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.09"
          },
          {
            "model": "sp 221",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp c250sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.15"
          },
          {
            "model": "sp 3710dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 212w",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp c261sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.17"
          },
          {
            "model": "sp 212sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.08"
          },
          {
            "model": "sp c262dnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.13"
          },
          {
            "model": "sp c260dnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp 213snw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.05"
          },
          {
            "model": "sp c260sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.15"
          },
          {
            "model": "sp c252dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.09"
          },
          {
            "model": "m 2700",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 212sfnw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.08"
          },
          {
            "model": "sp c252sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.15"
          },
          {
            "model": "sp 3710sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 221snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.11"
          },
          {
            "model": "sp 213sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213w",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 213nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "p c301w",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp c262sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.17"
          },
          {
            "model": "mp 2014ad",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp 212sfw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.08"
          },
          {
            "model": "sp c261dnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.13"
          },
          {
            "model": "m c250fwb",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp277nwx",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "sp 220sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "m 2701",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 213nw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "p c300w",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp 330dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 212nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 277snwx",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp 221sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.11"
          },
          {
            "model": "sp 212suw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213sfnw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 330sfn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213suw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "mp 2014",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp 330sn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 221sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp 220snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.11"
          },
          {
            "model": "sp 213snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213sfw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 212snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 221s",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp 220nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "mp 2014d",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp 221nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "m c250fw",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "m c250fwb",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "p c300w",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "p c301w",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp 330sfn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp 330sn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c250sf",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c252dn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c252sf",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02455"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014136"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14301"
          }
        ]
      },
      "configurations": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/configurations#",
          "children": {
            "@container": "@list"
          },
          "cpe_match": {
            "@container": "@list"
          },
          "data": {
            "@container": "@list"
          },
          "nodes": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "CVE_data_version": "4.0",
            "nodes": [
              {
                "cpe_match": [
                  {
                    "cpe22Uri": "cpe:/o:ricoh:m_c250fw_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:m_c250fwb_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:p_c300w_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:p_c301w_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_330sfn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_330sn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014136"
          }
        ]
      },
      "cve": "CVE-2019-14301",
      "cvss": {
        "@context": {
          "cvssV2": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
          },
          "cvssV3": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
          },
          "severity": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/cvss/severity#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "cvssV2": [
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "nvd@nist.gov",
                "availabilityImpact": "NONE",
                "baseScore": 5.0,
                "confidentialityImpact": "PARTIAL",
                "exploitabilityScore": 10.0,
                "id": "CVE-2019-14301",
                "impactScore": 2.9,
                "integrityImpact": "NONE",
                "severity": "MEDIUM",
                "trust": 1.9,
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "CNVD",
                "availabilityImpact": "NONE",
                "baseScore": 5.0,
                "confidentialityImpact": "PARTIAL",
                "exploitabilityScore": 10.0,
                "id": "CNVD-2020-02455",
                "impactScore": 2.9,
                "integrityImpact": "NONE",
                "severity": "MEDIUM",
                "trust": 0.6,
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
                "version": "2.0"
              }
            ],
            "cvssV3": [
              {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "author": "nvd@nist.gov",
                "availabilityImpact": "NONE",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "exploitabilityScore": 3.9,
                "id": "CVE-2019-14301",
                "impactScore": 3.6,
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "trust": 1.0,
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              {
                "attackComplexity": "Low",
                "attackVector": "Network",
                "author": "NVD",
                "availabilityImpact": "None",
                "baseScore": 7.5,
                "baseSeverity": "High",
                "confidentialityImpact": "High",
                "exploitabilityScore": null,
                "id": "CVE-2019-14301",
                "impactScore": null,
                "integrityImpact": "None",
                "privilegesRequired": "None",
                "scope": "Unchanged",
                "trust": 0.8,
                "userInteraction": "None",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.0"
              }
            ],
            "severity": [
              {
                "author": "nvd@nist.gov",
                "id": "CVE-2019-14301",
                "trust": 1.0,
                "value": "HIGH"
              },
              {
                "author": "NVD",
                "id": "CVE-2019-14301",
                "trust": 0.8,
                "value": "High"
              },
              {
                "author": "CNVD",
                "id": "CNVD-2020-02455",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "CNNVD",
                "id": "CNNVD-202001-406",
                "trust": 0.6,
                "value": "HIGH"
              },
              {
                "author": "VULMON",
                "id": "CVE-2019-14301",
                "trust": 0.1,
                "value": "MEDIUM"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02455"
          },
          {
            "db": "VULMON",
            "id": "CVE-2019-14301"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014136"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-406"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14301"
          }
        ]
      },
      "description": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/description#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2). Ricoh SP C250DN The device contains an authentication vulnerability.Information may be obtained. RICOH SP C250DN is a printer from Ricoh Japan. \n\nAn information disclosure vulnerability exists in RICOH SP C250DN version 1.06. The vulnerability stems from configuration errors during the operation of the network system or product. An unauthorized attacker could use the vulnerability to obtain sensitive information about the affected component",
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2019-14301"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014136"
          },
          {
            "db": "CNVD",
            "id": "CNVD-2020-02455"
          },
          {
            "db": "VULMON",
            "id": "CVE-2019-14301"
          }
        ],
        "trust": 2.25
      },
      "external_ids": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "db": "NVD",
            "id": "CVE-2019-14301",
            "trust": 3.1
          },
          {
            "db": "JVN",
            "id": "JVN52962201",
            "trust": 1.7
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014136",
            "trust": 1.4
          },
          {
            "db": "CNVD",
            "id": "CNVD-2020-02455",
            "trust": 0.6
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-406",
            "trust": 0.6
          },
          {
            "db": "VULMON",
            "id": "CVE-2019-14301",
            "trust": 0.1
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02455"
          },
          {
            "db": "VULMON",
            "id": "CVE-2019-14301"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014136"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-406"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14301"
          }
        ]
      },
      "id": "VAR-202001-0767",
      "iot": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": true,
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02455"
          }
        ],
        "trust": 1.1948718
      },
      "iot_taxonomy": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "category": [
              "Network device"
            ],
            "sub_category": null,
            "trust": 0.6
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02455"
          }
        ]
      },
      "last_update_date": "2024-11-23T21:36:14.327000Z",
      "patch": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/patch#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "title": "UPDATE\uff1aPotential security vulnerabilities in some of Ricoh\u0027s printers and Multifunction Printers (MFPs)",
            "trust": 0.8,
            "url": "https://www.ricoh.com/info/2019/0823_1/"
          },
          {
            "title": "Patch for RICOH SP C250DN Information Disclosure Vulnerability",
            "trust": 0.6,
            "url": "https://www.cnvd.org.cn/patchInfo/show/197267"
          },
          {
            "title": "",
            "trust": 0.1,
            "url": "https://github.com/Live-Hack-CVE/CVE-2019-14301 "
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02455"
          },
          {
            "db": "VULMON",
            "id": "CVE-2019-14301"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014136"
          }
        ]
      },
      "problemtype_data": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "problemtype": "CWE-200",
            "trust": 1.0
          },
          {
            "problemtype": "CWE-287",
            "trust": 0.8
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014136"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14301"
          }
        ]
      },
      "references": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/references#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "trust": 2.0,
            "url": "https://nvd.nist.gov/vuln/detail/cve-2019-14301"
          },
          {
            "trust": 1.7,
            "url": "https://www.ricoh.com/info/2019/0823_1/"
          },
          {
            "trust": 1.7,
            "url": "http://jvn.jp/en/jp/jvn52962201/index.html"
          },
          {
            "trust": 0.8,
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14301"
          },
          {
            "trust": 0.6,
            "url": "https://jvndb.jvn.jp/en/contents/2019/jvndb-2019-014136.html"
          },
          {
            "trust": 0.1,
            "url": "https://cwe.mitre.org/data/definitions/200.html"
          },
          {
            "trust": 0.1,
            "url": "https://github.com/live-hack-cve/cve-2019-14301"
          },
          {
            "trust": 0.1,
            "url": "https://nvd.nist.gov"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02455"
          },
          {
            "db": "VULMON",
            "id": "CVE-2019-14301"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014136"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-406"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14301"
          }
        ]
      },
      "sources": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02455"
          },
          {
            "db": "VULMON",
            "id": "CVE-2019-14301"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014136"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-406"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14301"
          }
        ]
      },
      "sources_release_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2020-01-16T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2020-02455"
          },
          {
            "date": "2020-01-10T00:00:00",
            "db": "VULMON",
            "id": "CVE-2019-14301"
          },
          {
            "date": "2020-02-04T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2019-014136"
          },
          {
            "date": "2020-01-10T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-202001-406"
          },
          {
            "date": "2020-01-10T18:15:11.333000",
            "db": "NVD",
            "id": "CVE-2019-14301"
          }
        ]
      },
      "sources_update_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2020-01-16T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2020-02455"
          },
          {
            "date": "2023-02-01T00:00:00",
            "db": "VULMON",
            "id": "CVE-2019-14301"
          },
          {
            "date": "2020-02-04T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2019-014136"
          },
          {
            "date": "2023-02-02T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-202001-406"
          },
          {
            "date": "2024-11-21T04:26:26.527000",
            "db": "NVD",
            "id": "CVE-2019-14301"
          }
        ]
      },
      "threat_type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "remote",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-406"
          }
        ],
        "trust": 0.6
      },
      "title": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/title#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "RICOH SP C250DN Information Disclosure Vulnerability",
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02455"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-406"
          }
        ],
        "trust": 1.2
      },
      "type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "information disclosure",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-406"
          }
        ],
        "trust": 0.6
      }
    }

    VAR-202001-0764

    Vulnerability from variot - Updated: 2024-11-23 21:36

    Ricoh SP C250DN 1.06 devices allow CSRF. Ricoh SP C250DN The device contains a cross-site request forgery vulnerability.Information is acquired, information is falsified, and denial of service (DoS) May be in a state. RICOH SP C250DN is a printer from Ricoh Japan. The vulnerability stems from a web application's insufficient verification that the request came from a trusted user. An attacker could use this vulnerability to send an unexpected request to the server through an affected client

    Show details on source website

    {
      "@context": {
        "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
        "affected_products": {
          "@id": "https://www.variotdbs.pl/ref/affected_products"
        },
        "configurations": {
          "@id": "https://www.variotdbs.pl/ref/configurations"
        },
        "credits": {
          "@id": "https://www.variotdbs.pl/ref/credits"
        },
        "cvss": {
          "@id": "https://www.variotdbs.pl/ref/cvss/"
        },
        "description": {
          "@id": "https://www.variotdbs.pl/ref/description/"
        },
        "exploit_availability": {
          "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
        },
        "external_ids": {
          "@id": "https://www.variotdbs.pl/ref/external_ids/"
        },
        "iot": {
          "@id": "https://www.variotdbs.pl/ref/iot/"
        },
        "iot_taxonomy": {
          "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
        },
        "patch": {
          "@id": "https://www.variotdbs.pl/ref/patch/"
        },
        "problemtype_data": {
          "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
        },
        "references": {
          "@id": "https://www.variotdbs.pl/ref/references/"
        },
        "sources": {
          "@id": "https://www.variotdbs.pl/ref/sources/"
        },
        "sources_release_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
        },
        "sources_update_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
        },
        "threat_type": {
          "@id": "https://www.variotdbs.pl/ref/threat_type/"
        },
        "title": {
          "@id": "https://www.variotdbs.pl/ref/title/"
        },
        "type": {
          "@id": "https://www.variotdbs.pl/ref/type/"
        }
      },
      "@id": "https://www.variotdbs.pl/vuln/VAR-202001-0764",
      "affected_products": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "model": "m c250fw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp 277sfnwx",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp c250dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.09"
          },
          {
            "model": "sp 221",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp c250sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.15"
          },
          {
            "model": "sp 3710dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 212w",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp c261sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.17"
          },
          {
            "model": "sp 212sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.08"
          },
          {
            "model": "sp c262dnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.13"
          },
          {
            "model": "sp c260dnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp 213snw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.05"
          },
          {
            "model": "sp c260sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.15"
          },
          {
            "model": "sp c252dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.09"
          },
          {
            "model": "m 2700",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 212sfnw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.08"
          },
          {
            "model": "sp c252sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.15"
          },
          {
            "model": "sp 3710sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 221snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.11"
          },
          {
            "model": "sp 213sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213w",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 213nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "p c301w",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp c262sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.17"
          },
          {
            "model": "mp 2014ad",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp 212sfw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.08"
          },
          {
            "model": "sp c261dnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.13"
          },
          {
            "model": "m c250fwb",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp277nwx",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "sp 220sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "m 2701",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 213nw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "p c300w",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp 330dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 212nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 277snwx",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp 221sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.11"
          },
          {
            "model": "sp 212suw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213sfnw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 330sfn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213suw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "mp 2014",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp 330sn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 221sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp 220snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.11"
          },
          {
            "model": "sp 213snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213sfw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 212snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 221s",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp 220nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "mp 2014d",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp 221nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "m c250fw",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "m c250fwb",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "p c300w",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "p c301w",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp 330sfn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp 330sn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c250dn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c250sf",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c252dn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c252sf",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c250dn",
            "scope": "eq",
            "trust": 0.6,
            "vendor": "ricoh",
            "version": "1.06"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02454"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014031"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14304"
          }
        ]
      },
      "configurations": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/configurations#",
          "children": {
            "@container": "@list"
          },
          "cpe_match": {
            "@container": "@list"
          },
          "data": {
            "@container": "@list"
          },
          "nodes": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "CVE_data_version": "4.0",
            "nodes": [
              {
                "cpe_match": [
                  {
                    "cpe22Uri": "cpe:/o:ricoh:m_c250fw_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:m_c250fwb_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:p_c300w_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:p_c301w_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_330sfn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_330sn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014031"
          }
        ]
      },
      "cve": "CVE-2019-14304",
      "cvss": {
        "@context": {
          "cvssV2": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
          },
          "cvssV3": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
          },
          "severity": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/cvss/severity#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "cvssV2": [
              {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "nvd@nist.gov",
                "availabilityImpact": "PARTIAL",
                "baseScore": 6.8,
                "confidentialityImpact": "PARTIAL",
                "exploitabilityScore": 8.6,
                "id": "CVE-2019-14304",
                "impactScore": 6.4,
                "integrityImpact": "PARTIAL",
                "severity": "MEDIUM",
                "trust": 1.8,
                "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "CNVD",
                "availabilityImpact": "COMPLETE",
                "baseScore": 10.0,
                "confidentialityImpact": "COMPLETE",
                "exploitabilityScore": 10.0,
                "id": "CNVD-2020-02454",
                "impactScore": 10.0,
                "integrityImpact": "COMPLETE",
                "severity": "HIGH",
                "trust": 0.6,
                "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              }
            ],
            "cvssV3": [
              {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "author": "nvd@nist.gov",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "exploitabilityScore": 2.8,
                "id": "CVE-2019-14304",
                "impactScore": 5.9,
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "trust": 1.0,
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              {
                "attackComplexity": "Low",
                "attackVector": "Network",
                "author": "NVD",
                "availabilityImpact": "High",
                "baseScore": 8.8,
                "baseSeverity": "High",
                "confidentialityImpact": "High",
                "exploitabilityScore": null,
                "id": "CVE-2019-14304",
                "impactScore": null,
                "integrityImpact": "High",
                "privilegesRequired": "None",
                "scope": "Unchanged",
                "trust": 0.8,
                "userInteraction": "Required",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.0"
              }
            ],
            "severity": [
              {
                "author": "nvd@nist.gov",
                "id": "CVE-2019-14304",
                "trust": 1.0,
                "value": "HIGH"
              },
              {
                "author": "NVD",
                "id": "CVE-2019-14304",
                "trust": 0.8,
                "value": "High"
              },
              {
                "author": "CNVD",
                "id": "CNVD-2020-02454",
                "trust": 0.6,
                "value": "HIGH"
              },
              {
                "author": "CNNVD",
                "id": "CNNVD-202001-393",
                "trust": 0.6,
                "value": "HIGH"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02454"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014031"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-393"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14304"
          }
        ]
      },
      "description": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/description#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Ricoh SP C250DN 1.06 devices allow CSRF. Ricoh SP C250DN The device contains a cross-site request forgery vulnerability.Information is acquired, information is falsified, and denial of service (DoS) May be in a state. RICOH SP C250DN is a printer from Ricoh Japan. The vulnerability stems from a web application\u0027s insufficient verification that the request came from a trusted user. An attacker could use this vulnerability to send an unexpected request to the server through an affected client",
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2019-14304"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014031"
          },
          {
            "db": "CNVD",
            "id": "CNVD-2020-02454"
          }
        ],
        "trust": 2.16
      },
      "external_ids": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "db": "NVD",
            "id": "CVE-2019-14304",
            "trust": 3.0
          },
          {
            "db": "JVN",
            "id": "JVN52962201",
            "trust": 1.6
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014031",
            "trust": 1.4
          },
          {
            "db": "CNVD",
            "id": "CNVD-2020-02454",
            "trust": 0.6
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-393",
            "trust": 0.6
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02454"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014031"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-393"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14304"
          }
        ]
      },
      "id": "VAR-202001-0764",
      "iot": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": true,
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02454"
          }
        ],
        "trust": 1.1948718
      },
      "iot_taxonomy": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "category": [
              "Network device"
            ],
            "sub_category": null,
            "trust": 0.6
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02454"
          }
        ]
      },
      "last_update_date": "2024-11-23T21:36:14.300000Z",
      "patch": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/patch#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "title": "UPDATE\uff1aPotential security vulnerabilities in some of Ricoh\u0027s printers and Multifunction Printers (MFPs)",
            "trust": 0.8,
            "url": "https://www.ricoh.com/info/2019/0823_1/"
          },
          {
            "title": "Patch for RICOH SP C250DN Cross-Site Request Forgery Vulnerability",
            "trust": 0.6,
            "url": "https://www.cnvd.org.cn/patchInfo/show/197259"
          },
          {
            "title": "RICOH SP C250DN Fixes for cross-site request forgery vulnerabilities",
            "trust": 0.6,
            "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=108426"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02454"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014031"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-393"
          }
        ]
      },
      "problemtype_data": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "problemtype": "CWE-352",
            "trust": 1.8
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014031"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14304"
          }
        ]
      },
      "references": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/references#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "trust": 2.0,
            "url": "https://nvd.nist.gov/vuln/detail/cve-2019-14304"
          },
          {
            "trust": 1.6,
            "url": "https://www.ricoh.com/info/2019/0823_1/"
          },
          {
            "trust": 1.6,
            "url": "http://jvn.jp/en/jp/jvn52962201/index.html"
          },
          {
            "trust": 0.8,
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14304"
          },
          {
            "trust": 0.6,
            "url": "https://jvndb.jvn.jp/en/contents/2019/jvndb-2019-014031.html"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02454"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014031"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-393"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14304"
          }
        ]
      },
      "sources": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02454"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014031"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-393"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14304"
          }
        ]
      },
      "sources_release_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2020-01-16T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2020-02454"
          },
          {
            "date": "2020-01-27T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2019-014031"
          },
          {
            "date": "2020-01-10T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-202001-393"
          },
          {
            "date": "2020-01-10T18:15:11.507000",
            "db": "NVD",
            "id": "CVE-2019-14304"
          }
        ]
      },
      "sources_update_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2020-01-16T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2020-02454"
          },
          {
            "date": "2020-01-27T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2019-014031"
          },
          {
            "date": "2020-05-19T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-202001-393"
          },
          {
            "date": "2024-11-21T04:26:27.137000",
            "db": "NVD",
            "id": "CVE-2019-14304"
          }
        ]
      },
      "threat_type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "remote",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-393"
          }
        ],
        "trust": 0.6
      },
      "title": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/title#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "RICOH SP C250DN Cross-Site Request Forgery Vulnerability",
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02454"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-393"
          }
        ],
        "trust": 1.2
      },
      "type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "cross-site request forgery",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-393"
          }
        ],
        "trust": 0.6
      }
    }

    VAR-202001-0768

    Vulnerability from variot - Updated: 2024-11-23 21:36

    On Ricoh SP C250DN 1.06 devices, a debug port can be used. Ricoh SP C250DN The device contains an input validation vulnerability.Information is acquired, information is falsified, and denial of service (DoS) May be in a state. RICOH SP C250DN is a printer from Ricoh Japan.

    There is a security vulnerability in RICOH SP C250DN version 1.06. Attackers can use this vulnerability to retrieve sensitive information

    Show details on source website

    {
      "@context": {
        "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
        "affected_products": {
          "@id": "https://www.variotdbs.pl/ref/affected_products"
        },
        "configurations": {
          "@id": "https://www.variotdbs.pl/ref/configurations"
        },
        "credits": {
          "@id": "https://www.variotdbs.pl/ref/credits"
        },
        "cvss": {
          "@id": "https://www.variotdbs.pl/ref/cvss/"
        },
        "description": {
          "@id": "https://www.variotdbs.pl/ref/description/"
        },
        "exploit_availability": {
          "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
        },
        "external_ids": {
          "@id": "https://www.variotdbs.pl/ref/external_ids/"
        },
        "iot": {
          "@id": "https://www.variotdbs.pl/ref/iot/"
        },
        "iot_taxonomy": {
          "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
        },
        "patch": {
          "@id": "https://www.variotdbs.pl/ref/patch/"
        },
        "problemtype_data": {
          "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
        },
        "references": {
          "@id": "https://www.variotdbs.pl/ref/references/"
        },
        "sources": {
          "@id": "https://www.variotdbs.pl/ref/sources/"
        },
        "sources_release_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
        },
        "sources_update_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
        },
        "threat_type": {
          "@id": "https://www.variotdbs.pl/ref/threat_type/"
        },
        "title": {
          "@id": "https://www.variotdbs.pl/ref/title/"
        },
        "type": {
          "@id": "https://www.variotdbs.pl/ref/type/"
        }
      },
      "@id": "https://www.variotdbs.pl/vuln/VAR-202001-0768",
      "affected_products": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "model": "sp c250dn",
            "scope": "eq",
            "trust": 1.4,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 277sfnwx",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp c250dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.09"
          },
          {
            "model": "sp 221",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp c250sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.15"
          },
          {
            "model": "sp 3710dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 212w",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp c261sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.17"
          },
          {
            "model": "sp 210su \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 210e \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp 210 \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp 211sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 212sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.08"
          },
          {
            "model": "sp c262dnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.13"
          },
          {
            "model": "sp c260dnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp 213snw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.05"
          },
          {
            "model": "sp c260sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.15"
          },
          {
            "model": "sp c252dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.09"
          },
          {
            "model": "sp 210sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 211",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "m 2700",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 212sfnw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.08"
          },
          {
            "model": "sp 210sf \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp c252sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.15"
          },
          {
            "model": "sp 3710sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 221snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.11"
          },
          {
            "model": "sp 213sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213w",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 213nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp c262sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.17"
          },
          {
            "model": "mp 2014ad",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp c261dnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.13"
          },
          {
            "model": "sp277nwx",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "sp 221s",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp 220sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp 210su",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "m 2701",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 213nw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "sp 210 q \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp 330dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 210",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 212nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 210su q \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 277snwx",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp 221sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.11"
          },
          {
            "model": "sp 212suw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213sfnw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 210sf q \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 330sfn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213suw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "mp 2014",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp 330sn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 221sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp 220snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.11"
          },
          {
            "model": "sp 213snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213sfw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 212snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 212sfw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.08"
          },
          {
            "model": "sp 220nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "mp 2014d",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp 221nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "sp 211su",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 330dn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp 330sfn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp 330sn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp 3710dn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp 3710sf",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c250sf",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c252dn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c252sf",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c260dnw",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-03703"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014137"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14302"
          }
        ]
      },
      "configurations": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/configurations#",
          "children": {
            "@container": "@list"
          },
          "cpe_match": {
            "@container": "@list"
          },
          "data": {
            "@container": "@list"
          },
          "nodes": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "CVE_data_version": "4.0",
            "nodes": [
              {
                "cpe_match": [
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_330dn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_330sfn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_330sn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_3710dn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_3710sf_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c260dnw_firmware",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014137"
          }
        ]
      },
      "cve": "CVE-2019-14302",
      "cvss": {
        "@context": {
          "cvssV2": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
          },
          "cvssV3": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
          },
          "severity": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/cvss/severity#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "cvssV2": [
              {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "nvd@nist.gov",
                "availabilityImpact": "COMPLETE",
                "baseScore": 7.2,
                "confidentialityImpact": "COMPLETE",
                "exploitabilityScore": 3.9,
                "id": "CVE-2019-14302",
                "impactScore": 10.0,
                "integrityImpact": "COMPLETE",
                "severity": "HIGH",
                "trust": 1.9,
                "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "CNVD",
                "availabilityImpact": "NONE",
                "baseScore": 5.0,
                "confidentialityImpact": "PARTIAL",
                "exploitabilityScore": 10.0,
                "id": "CNVD-2020-03703",
                "impactScore": 2.9,
                "integrityImpact": "NONE",
                "severity": "MEDIUM",
                "trust": 0.6,
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
                "version": "2.0"
              }
            ],
            "cvssV3": [
              {
                "attackComplexity": "LOW",
                "attackVector": "PHYSICAL",
                "author": "nvd@nist.gov",
                "availabilityImpact": "HIGH",
                "baseScore": 6.8,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "exploitabilityScore": 0.9,
                "id": "CVE-2019-14302",
                "impactScore": 5.9,
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "trust": 1.0,
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              {
                "attackComplexity": "Low",
                "attackVector": "Physical",
                "author": "NVD",
                "availabilityImpact": "High",
                "baseScore": 6.8,
                "baseSeverity": "Medium",
                "confidentialityImpact": "High",
                "exploitabilityScore": null,
                "id": "CVE-2019-14302",
                "impactScore": null,
                "integrityImpact": "High",
                "privilegesRequired": "None",
                "scope": "Unchanged",
                "trust": 0.8,
                "userInteraction": "None",
                "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.0"
              }
            ],
            "severity": [
              {
                "author": "nvd@nist.gov",
                "id": "CVE-2019-14302",
                "trust": 1.0,
                "value": "MEDIUM"
              },
              {
                "author": "NVD",
                "id": "CVE-2019-14302",
                "trust": 0.8,
                "value": "Medium"
              },
              {
                "author": "CNVD",
                "id": "CNVD-2020-03703",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "CNNVD",
                "id": "CNNVD-202001-391",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "VULMON",
                "id": "CVE-2019-14302",
                "trust": 0.1,
                "value": "HIGH"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-03703"
          },
          {
            "db": "VULMON",
            "id": "CVE-2019-14302"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014137"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-391"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14302"
          }
        ]
      },
      "description": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/description#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "On Ricoh SP C250DN 1.06 devices, a debug port can be used. Ricoh SP C250DN The device contains an input validation vulnerability.Information is acquired, information is falsified, and denial of service (DoS) May be in a state. RICOH SP C250DN is a printer from Ricoh Japan. \n\r\n\r\nThere is a security vulnerability in RICOH SP C250DN version 1.06. Attackers can use this vulnerability to retrieve sensitive information",
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2019-14302"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014137"
          },
          {
            "db": "CNVD",
            "id": "CNVD-2020-03703"
          },
          {
            "db": "VULMON",
            "id": "CVE-2019-14302"
          }
        ],
        "trust": 2.25
      },
      "external_ids": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "db": "NVD",
            "id": "CVE-2019-14302",
            "trust": 3.1
          },
          {
            "db": "JVN",
            "id": "JVN52962201",
            "trust": 1.7
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014137",
            "trust": 1.4
          },
          {
            "db": "CNVD",
            "id": "CNVD-2020-03703",
            "trust": 0.6
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-391",
            "trust": 0.6
          },
          {
            "db": "VULMON",
            "id": "CVE-2019-14302",
            "trust": 0.1
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-03703"
          },
          {
            "db": "VULMON",
            "id": "CVE-2019-14302"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014137"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-391"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14302"
          }
        ]
      },
      "id": "VAR-202001-0768",
      "iot": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": true,
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-03703"
          }
        ],
        "trust": 1.1948718
      },
      "iot_taxonomy": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "category": [
              "Network device"
            ],
            "sub_category": null,
            "trust": 0.6
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-03703"
          }
        ]
      },
      "last_update_date": "2024-11-23T21:36:14.268000Z",
      "patch": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/patch#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "title": "UPDATE\uff1aPotential security vulnerabilities in some of Ricoh\u0027s printers and Multifunction Printers (MFPs)",
            "trust": 0.8,
            "url": "https://www.ricoh.com/info/2019/0823_1/"
          },
          {
            "title": "Patch for Unknown vulnerability in RICOH SP C250DN",
            "trust": 0.6,
            "url": "https://www.cnvd.org.cn/patchInfo/show/198937"
          },
          {
            "title": "RICOH SP C250DN Enter the fix for the verification error vulnerability",
            "trust": 0.6,
            "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=108425"
          },
          {
            "title": "",
            "trust": 0.1,
            "url": "https://github.com/Live-Hack-CVE/CVE-2019-14302 "
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-03703"
          },
          {
            "db": "VULMON",
            "id": "CVE-2019-14302"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014137"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-391"
          }
        ]
      },
      "problemtype_data": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "problemtype": "NVD-CWE-noinfo",
            "trust": 1.0
          },
          {
            "problemtype": "CWE-20",
            "trust": 0.8
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014137"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14302"
          }
        ]
      },
      "references": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/references#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "trust": 2.0,
            "url": "https://nvd.nist.gov/vuln/detail/cve-2019-14302"
          },
          {
            "trust": 1.7,
            "url": "https://www.ricoh.com/info/2019/0823_1/"
          },
          {
            "trust": 1.7,
            "url": "http://jvn.jp/en/jp/jvn52962201/index.html"
          },
          {
            "trust": 0.8,
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14302"
          },
          {
            "trust": 0.6,
            "url": "https://jvndb.jvn.jp/en/contents/2019/jvndb-2019-014137.html"
          },
          {
            "trust": 0.1,
            "url": "https://cwe.mitre.org/data/definitions/.html"
          },
          {
            "trust": 0.1,
            "url": "https://github.com/live-hack-cve/cve-2019-14302"
          },
          {
            "trust": 0.1,
            "url": "https://nvd.nist.gov"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-03703"
          },
          {
            "db": "VULMON",
            "id": "CVE-2019-14302"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014137"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-391"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14302"
          }
        ]
      },
      "sources": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-03703"
          },
          {
            "db": "VULMON",
            "id": "CVE-2019-14302"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014137"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-391"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14302"
          }
        ]
      },
      "sources_release_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2020-02-04T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2020-03703"
          },
          {
            "date": "2020-01-10T00:00:00",
            "db": "VULMON",
            "id": "CVE-2019-14302"
          },
          {
            "date": "2020-02-04T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2019-014137"
          },
          {
            "date": "2020-01-10T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-202001-391"
          },
          {
            "date": "2020-01-10T18:15:11.413000",
            "db": "NVD",
            "id": "CVE-2019-14302"
          }
        ]
      },
      "sources_update_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2020-02-04T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2020-03703"
          },
          {
            "date": "2023-02-01T00:00:00",
            "db": "VULMON",
            "id": "CVE-2019-14302"
          },
          {
            "date": "2020-02-04T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2019-014137"
          },
          {
            "date": "2020-08-25T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-202001-391"
          },
          {
            "date": "2024-11-21T04:26:26.787000",
            "db": "NVD",
            "id": "CVE-2019-14302"
          }
        ]
      },
      "title": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/title#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Ricoh SP C250DN Device input validation vulnerability",
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014137"
          }
        ],
        "trust": 0.8
      },
      "type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "input validation error",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-391"
          }
        ],
        "trust": 0.6
      }
    }

    VAR-202001-0765

    Vulnerability from variot - Updated: 2024-11-23 21:36

    Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2). Ricoh SP C250DN The device contains an authentication vulnerability.Information may be obtained. RICOH SP C250DN is a printer from Ricoh Japan.

    An information disclosure vulnerability exists in RICOH SP C250DN version 1.06. The vulnerability stems from configuration errors during the operation of the network system or product. An unauthorized attacker could use the vulnerability to obtain sensitive information about the affected component

    Show details on source website

    {
      "@context": {
        "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
        "affected_products": {
          "@id": "https://www.variotdbs.pl/ref/affected_products"
        },
        "configurations": {
          "@id": "https://www.variotdbs.pl/ref/configurations"
        },
        "credits": {
          "@id": "https://www.variotdbs.pl/ref/credits"
        },
        "cvss": {
          "@id": "https://www.variotdbs.pl/ref/cvss/"
        },
        "description": {
          "@id": "https://www.variotdbs.pl/ref/description/"
        },
        "exploit_availability": {
          "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
        },
        "external_ids": {
          "@id": "https://www.variotdbs.pl/ref/external_ids/"
        },
        "iot": {
          "@id": "https://www.variotdbs.pl/ref/iot/"
        },
        "iot_taxonomy": {
          "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
        },
        "patch": {
          "@id": "https://www.variotdbs.pl/ref/patch/"
        },
        "problemtype_data": {
          "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
        },
        "references": {
          "@id": "https://www.variotdbs.pl/ref/references/"
        },
        "sources": {
          "@id": "https://www.variotdbs.pl/ref/sources/"
        },
        "sources_release_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
        },
        "sources_update_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
        },
        "threat_type": {
          "@id": "https://www.variotdbs.pl/ref/threat_type/"
        },
        "title": {
          "@id": "https://www.variotdbs.pl/ref/title/"
        },
        "type": {
          "@id": "https://www.variotdbs.pl/ref/type/"
        }
      },
      "@id": "https://www.variotdbs.pl/vuln/VAR-202001-0765",
      "affected_products": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "model": "sp c250dn",
            "scope": "eq",
            "trust": 1.4,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 277sfnwx",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp c250dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.09"
          },
          {
            "model": "sp 221",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.02"
          },
          {
            "model": "sp c250sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.15"
          },
          {
            "model": "sp 3710dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 212w",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp c261sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.17"
          },
          {
            "model": "sp 212sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.08"
          },
          {
            "model": "sp c262dnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.13"
          },
          {
            "model": "sp c260dnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp 213snw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.05"
          },
          {
            "model": "sp c260sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.15"
          },
          {
            "model": "sp c252dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.09"
          },
          {
            "model": "m 2700",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 212sfnw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.08"
          },
          {
            "model": "sp c252sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.15"
          },
          {
            "model": "sp 3710sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 221snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.11"
          },
          {
            "model": "sp 213sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213w",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 213nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp c262sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.17"
          },
          {
            "model": "mp 2014ad",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp c261dnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.13"
          },
          {
            "model": "sp277nwx",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "sp 221s",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp 220sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "m 2701",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 213nw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "sp 330dn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 212nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 277snwx",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp 221sf",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.11"
          },
          {
            "model": "sp 212suw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213sfnw \\",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.06"
          },
          {
            "model": "sp 330sfn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213suw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "mp 2014",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp 330sn",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 221sfnw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.12"
          },
          {
            "model": "sp 220snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.11"
          },
          {
            "model": "sp 213snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 213sfw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 212snw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.07"
          },
          {
            "model": "sp 212sfw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.08"
          },
          {
            "model": "sp 220nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "mp 2014d",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.10"
          },
          {
            "model": "sp 221nw",
            "scope": "lt",
            "trust": 1.0,
            "vendor": "ricoh",
            "version": "1.04"
          },
          {
            "model": "sp 330dn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp 330sfn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp 330sn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp 3710dn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp 3710sf",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c250sf",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c252dn",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c252sf",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          },
          {
            "model": "sp c260dnw",
            "scope": null,
            "trust": 0.8,
            "vendor": "ricoh",
            "version": null
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02453"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014138"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14306"
          }
        ]
      },
      "configurations": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/configurations#",
          "children": {
            "@container": "@list"
          },
          "cpe_match": {
            "@container": "@list"
          },
          "data": {
            "@container": "@list"
          },
          "nodes": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "CVE_data_version": "4.0",
            "nodes": [
              {
                "cpe_match": [
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_330dn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_330sfn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_330sn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_3710dn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_3710sf_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:ricoh:sp_c260dnw_firmware",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014138"
          }
        ]
      },
      "cve": "CVE-2019-14306",
      "cvss": {
        "@context": {
          "cvssV2": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
          },
          "cvssV3": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
          },
          "severity": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/cvss/severity#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "cvssV2": [
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "nvd@nist.gov",
                "availabilityImpact": "NONE",
                "baseScore": 5.0,
                "confidentialityImpact": "PARTIAL",
                "exploitabilityScore": 10.0,
                "id": "CVE-2019-14306",
                "impactScore": 2.9,
                "integrityImpact": "NONE",
                "severity": "MEDIUM",
                "trust": 1.8,
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "CNVD",
                "availabilityImpact": "NONE",
                "baseScore": 5.0,
                "confidentialityImpact": "PARTIAL",
                "exploitabilityScore": 10.0,
                "id": "CNVD-2020-02453",
                "impactScore": 2.9,
                "integrityImpact": "NONE",
                "severity": "MEDIUM",
                "trust": 0.6,
                "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
                "version": "2.0"
              }
            ],
            "cvssV3": [
              {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "author": "nvd@nist.gov",
                "availabilityImpact": "NONE",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "exploitabilityScore": 3.9,
                "id": "CVE-2019-14306",
                "impactScore": 3.6,
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "trust": 1.0,
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              {
                "attackComplexity": "Low",
                "attackVector": "Network",
                "author": "NVD",
                "availabilityImpact": "None",
                "baseScore": 7.5,
                "baseSeverity": "High",
                "confidentialityImpact": "High",
                "exploitabilityScore": null,
                "id": "CVE-2019-14306",
                "impactScore": null,
                "integrityImpact": "None",
                "privilegesRequired": "None",
                "scope": "Unchanged",
                "trust": 0.8,
                "userInteraction": "None",
                "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.0"
              }
            ],
            "severity": [
              {
                "author": "nvd@nist.gov",
                "id": "CVE-2019-14306",
                "trust": 1.0,
                "value": "HIGH"
              },
              {
                "author": "NVD",
                "id": "CVE-2019-14306",
                "trust": 0.8,
                "value": "High"
              },
              {
                "author": "CNVD",
                "id": "CNVD-2020-02453",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "CNNVD",
                "id": "CNNVD-202001-394",
                "trust": 0.6,
                "value": "HIGH"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02453"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014138"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-394"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14306"
          }
        ]
      },
      "description": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/description#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2). Ricoh SP C250DN The device contains an authentication vulnerability.Information may be obtained. RICOH SP C250DN is a printer from Ricoh Japan. \n\nAn information disclosure vulnerability exists in RICOH SP C250DN version 1.06. The vulnerability stems from configuration errors during the operation of the network system or product. An unauthorized attacker could use the vulnerability to obtain sensitive information about the affected component",
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2019-14306"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014138"
          },
          {
            "db": "CNVD",
            "id": "CNVD-2020-02453"
          }
        ],
        "trust": 2.16
      },
      "external_ids": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "db": "NVD",
            "id": "CVE-2019-14306",
            "trust": 3.0
          },
          {
            "db": "JVN",
            "id": "JVN52962201",
            "trust": 1.6
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014138",
            "trust": 1.4
          },
          {
            "db": "CNVD",
            "id": "CNVD-2020-02453",
            "trust": 0.6
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-394",
            "trust": 0.6
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02453"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014138"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-394"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14306"
          }
        ]
      },
      "id": "VAR-202001-0765",
      "iot": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": true,
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02453"
          }
        ],
        "trust": 1.1948718
      },
      "iot_taxonomy": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "category": [
              "Network device"
            ],
            "sub_category": null,
            "trust": 0.6
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02453"
          }
        ]
      },
      "last_update_date": "2024-11-23T21:36:14.240000Z",
      "patch": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/patch#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "title": "UPDATE\uff1aPotential security vulnerabilities in some of Ricoh\u0027s printers and Multifunction Printers (MFPs)",
            "trust": 0.8,
            "url": "https://www.ricoh.com/info/2019/0823_1/"
          },
          {
            "title": "Patch for RICOH SP C250DN Information Disclosure Vulnerability (CNVD-2020-02453)",
            "trust": 0.6,
            "url": "https://www.cnvd.org.cn/patchInfo/show/197265"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02453"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014138"
          }
        ]
      },
      "problemtype_data": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "problemtype": "NVD-CWE-noinfo",
            "trust": 1.0
          },
          {
            "problemtype": "CWE-287",
            "trust": 0.8
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014138"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14306"
          }
        ]
      },
      "references": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/references#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "trust": 2.0,
            "url": "https://nvd.nist.gov/vuln/detail/cve-2019-14306"
          },
          {
            "trust": 1.6,
            "url": "https://www.ricoh.com/info/2019/0823_1/"
          },
          {
            "trust": 1.6,
            "url": "http://jvn.jp/en/jp/jvn52962201/index.html"
          },
          {
            "trust": 0.8,
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14306"
          },
          {
            "trust": 0.6,
            "url": "https://jvndb.jvn.jp/en/contents/2019/jvndb-2019-014138.html"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02453"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014138"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-394"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14306"
          }
        ]
      },
      "sources": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "db": "CNVD",
            "id": "CNVD-2020-02453"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014138"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-394"
          },
          {
            "db": "NVD",
            "id": "CVE-2019-14306"
          }
        ]
      },
      "sources_release_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2020-01-16T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2020-02453"
          },
          {
            "date": "2020-02-04T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2019-014138"
          },
          {
            "date": "2020-01-10T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-202001-394"
          },
          {
            "date": "2020-01-10T18:15:11.583000",
            "db": "NVD",
            "id": "CVE-2019-14306"
          }
        ]
      },
      "sources_update_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2020-01-16T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2020-02453"
          },
          {
            "date": "2020-02-04T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2019-014138"
          },
          {
            "date": "2020-08-25T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-202001-394"
          },
          {
            "date": "2024-11-21T04:26:27.530000",
            "db": "NVD",
            "id": "CVE-2019-14306"
          }
        ]
      },
      "threat_type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "remote",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-394"
          }
        ],
        "trust": 0.6
      },
      "title": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/title#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Ricoh SP C250DN Authentication vulnerabilities in devices",
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2019-014138"
          }
        ],
        "trust": 0.8
      },
      "type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "authorization issue",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-202001-394"
          }
        ],
        "trust": 0.6
      }
    }