Search
Find a vulnerability
Search criteria
15 vulnerabilities found for SP C252SF by Ricoh
CVE-2026-101040 (GCVE-0-2026-101040)
Vulnerability from nvd – Published: 2026-09-28 11:00 – Updated: 2026-10-01 14:13
VLAI
EPSS
VEX
Title
Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service
Summary
A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 14:13 UTC
CWE
- CWE-404 - Denial of Service
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/410908 | vdb-entry |
| https://vuldb.com/vuln/410908/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-101040 | third-party-advisory |
| https://vuldb.com/submit/927274 | third-party-advisory |
| https://vuldb.com/submit/927275 | third-party-advisory |
| https://vuldb.com/submit/927289 | third-party-advisory |
| https://vuldb.com/submit/927478 | third-party-advisory |
| https://github.com/xiaobor123/vuls-find-VxWorks/t… | related |
| https://github.com/xiaobor123/vuls-find-VxWorks/b… | exploit |
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Ricoh | SP 330DN |
Affected:
20260813
cpe:2.3:a:ricoh:sp_330dn:*:*:*:*:*:*:*:* |
|
| Ricoh | SP 221 |
Affected:
20260813
cpe:2.3:a:ricoh:sp_221:*:*:*:*:*:*:*:* |
|
| Ricoh | SP C252SF |
Affected:
20260813
cpe:2.3:a:ricoh:sp_c252sf:*:*:*:*:*:*:*:* |
|
| Ricoh | Aficio SP 3500SF |
Affected:
20260813
cpe:2.3:a:ricoh:aficio_sp_3500sf:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-101040",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T14:13:30.430729Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T14:13:40.410Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ricoh:sp_330dn:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "SP 330DN",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
},
{
"cpes": [
"cpe:2.3:a:ricoh:sp_221:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "SP 221",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
},
{
"cpes": [
"cpe:2.3:a:ricoh:sp_c252sf:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "SP C252SF",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
},
{
"cpes": [
"cpe:2.3:a:ricoh:aficio_sp_3500sf:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "Aficio SP 3500SF",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xiaobor123 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.8,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-404",
"description": "Denial of Service",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-28T11:00:13.020Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-410908 | Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/410908"
},
{
"name": "VDB-410908 | CTI Indicators (IOB, IOC, TTP)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/410908/cti"
},
{
"name": "CVE-2026-101040 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-101040"
},
{
"name": "Submit #927274 | RICOH RICOH SP 330DN V1.11 Denial of Service",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927274"
},
{
"name": "Submit #927275 | RICOH SP 221 V1.02 Denial of Service (Duplicate)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927275"
},
{
"name": "Submit #927289 | RICOH SP C252SF V1.17 Denial of Service (Duplicate)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927289"
},
{
"name": "Submit #927478 | RICOH Aficio SP 3500SF V2.14 Stack-based Buffer Overflow (Duplicate)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927478"
},
{
"tags": [
"related"
],
"url": "https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/RICOH/03-SP330DN-multipart-parser-infinite-loop"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/xiaobor123/vuls-find-VxWorks/blob/main/RICOH/03-SP330DN-multipart-parser-infinite-loop/poc.py"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-27T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-27T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-28T11:53:59.000Z",
"value": "VulDB entry last update"
}
],
"title": "Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-101040",
"datePublished": "2026-09-28T11:00:13.020Z",
"dateReserved": "2026-09-27T14:33:04.218Z",
"dateUpdated": "2026-10-01T14:13:40.410Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-101040 (GCVE-0-2026-101040)
Vulnerability from cvelistv5 – Published: 2026-09-28 11:00 – Updated: 2026-10-01 14:13
VLAI
EPSS
VEX
Title
Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service
Summary
A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-01 14:13 UTC
CWE
- CWE-404 - Denial of Service
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/410908 | vdb-entry |
| https://vuldb.com/vuln/410908/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-101040 | third-party-advisory |
| https://vuldb.com/submit/927274 | third-party-advisory |
| https://vuldb.com/submit/927275 | third-party-advisory |
| https://vuldb.com/submit/927289 | third-party-advisory |
| https://vuldb.com/submit/927478 | third-party-advisory |
| https://github.com/xiaobor123/vuls-find-VxWorks/t… | related |
| https://github.com/xiaobor123/vuls-find-VxWorks/b… | exploit |
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Ricoh | SP 330DN |
Affected:
20260813
cpe:2.3:a:ricoh:sp_330dn:*:*:*:*:*:*:*:* |
|
| Ricoh | SP 221 |
Affected:
20260813
cpe:2.3:a:ricoh:sp_221:*:*:*:*:*:*:*:* |
|
| Ricoh | SP C252SF |
Affected:
20260813
cpe:2.3:a:ricoh:sp_c252sf:*:*:*:*:*:*:*:* |
|
| Ricoh | Aficio SP 3500SF |
Affected:
20260813
cpe:2.3:a:ricoh:aficio_sp_3500sf:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-101040",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-01T14:13:30.430729Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-01T14:13:40.410Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ricoh:sp_330dn:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "SP 330DN",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
},
{
"cpes": [
"cpe:2.3:a:ricoh:sp_221:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "SP 221",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
},
{
"cpes": [
"cpe:2.3:a:ricoh:sp_c252sf:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "SP C252SF",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
},
{
"cpes": [
"cpe:2.3:a:ricoh:aficio_sp_3500sf:*:*:*:*:*:*:*:*"
],
"modules": [
"HTTP Multipart Form-Data Parser"
],
"product": "Aficio SP 3500SF",
"vendor": "Ricoh",
"versions": [
{
"status": "affected",
"version": "20260813"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "xiaobor123 (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.8,
"vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-404",
"description": "Denial of Service",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-28T11:00:13.020Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-410908 | Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/410908"
},
{
"name": "VDB-410908 | CTI Indicators (IOB, IOC, TTP)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/410908/cti"
},
{
"name": "CVE-2026-101040 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-101040"
},
{
"name": "Submit #927274 | RICOH RICOH SP 330DN V1.11 Denial of Service",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927274"
},
{
"name": "Submit #927275 | RICOH SP 221 V1.02 Denial of Service (Duplicate)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927275"
},
{
"name": "Submit #927289 | RICOH SP C252SF V1.17 Denial of Service (Duplicate)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927289"
},
{
"name": "Submit #927478 | RICOH Aficio SP 3500SF V2.14 Stack-based Buffer Overflow (Duplicate)",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/927478"
},
{
"tags": [
"related"
],
"url": "https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/RICOH/03-SP330DN-multipart-parser-infinite-loop"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/xiaobor123/vuls-find-VxWorks/blob/main/RICOH/03-SP330DN-multipart-parser-infinite-loop/poc.py"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-09-27T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-09-27T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-09-28T11:53:59.000Z",
"value": "VulDB entry last update"
}
],
"title": "Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service",
"x_generator": [
"VulDB PVTS v202609"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-101040",
"datePublished": "2026-09-28T11:00:13.020Z",
"dateReserved": "2026-09-27T14:33:04.218Z",
"dateUpdated": "2026-10-01T14:13:40.410Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
VAR-201908-0931
Vulnerability from variot - Updated: 2025-01-30 21:10Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, SMTP, and notification alerts, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-::::::: up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:::::::, cpe:2.3:o:ricoh:sp_c252dn:-:::::::. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-::::::: up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:::::::, cpe:2.3:o:ricoh:sp_c252sf:-:::::::. Multiple printers and Multifunction Printers (MFPs) provided by RICOH COMPANY, LTD. contain multiple buffer overflows vulnerabilities listed below. * Buffer overflow in parsing HTTP cookie header (CWE-119) - CVE-2019-14300 * Buffer overflow in parsing HTTP parameter setting for Wifi, mDNS, POP3, SMTP and alert (CWE-119) - CVE-2019-14305 * Buffer overflow in parsing HTTP parameter setting for SNMP (CWE-119) - CVE-2019-14307 * Buffer overflow in parsing LPD packet (CWE-119) - CVE-2019-14308 RICOH COMPANY, LTD. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and RICOH COMPANY, LTD. coordinated under the Information Security Early Warning Partnership.A remote attacker may be able to cause a denial-of-service (DoS) condition or may execute arbitrary code. RICOH SP C252SF, etc. A buffer error vulnerability exists in several RICOH printers. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations. Attackers can exploit this vulnerability to cause buffer overflow or heap overflow, etc. The following products and versions are affected: RICOH SP C250SF with firmware prior to 1.07; SP C252SF with firmware prior to 1.07; SP C250DN with firmware prior to 1.13; SP C252DN with firmware prior to 1.13
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201908-0931",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sp c252sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "sp c252dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp c250sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "sp c250dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp c250dn",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.13"
},
{
"model": "sp c250sf",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.13"
},
{
"model": "sp c252dn",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.07"
},
{
"model": "sp c252sf",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.07"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "NVD",
"id": "CVE-2019-14305"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
}
]
},
"cve": "CVE-2019-14305",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "IPA",
"availabilityImpact": "Partial",
"baseScore": 7.5,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2019-000058",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 3.2,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2019-14305",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-146238",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "IPA",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2019-000058",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 3.2,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-14305",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "cve@mitre.org",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2019-14305",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "IPA",
"id": "JVNDB-2019-000058",
"trust": 3.2,
"value": "Critical"
},
{
"author": "nvd@nist.gov",
"id": "CVE-2019-14305",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "cve@mitre.org",
"id": "CVE-2019-14305",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201908-2000",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-146238",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-146238"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2000"
},
{
"db": "NVD",
"id": "CVE-2019-14305"
},
{
"db": "NVD",
"id": "CVE-2019-14305"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, SMTP, and notification alerts, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*. Multiple printers and Multifunction Printers (MFPs) provided by RICOH COMPANY, LTD. contain multiple buffer overflows vulnerabilities listed below. * Buffer overflow in parsing HTTP cookie header (CWE-119) - CVE-2019-14300 * Buffer overflow in parsing HTTP parameter setting for Wifi, mDNS, POP3, SMTP and alert (CWE-119) - CVE-2019-14305 * Buffer overflow in parsing HTTP parameter setting for SNMP (CWE-119) - CVE-2019-14307 * Buffer overflow in parsing LPD packet (CWE-119) - CVE-2019-14308 RICOH COMPANY, LTD. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and RICOH COMPANY, LTD. coordinated under the Information Security Early Warning Partnership.A remote attacker may be able to cause a denial-of-service (DoS) condition or may execute arbitrary code. RICOH SP C252SF, etc. A buffer error vulnerability exists in several RICOH printers. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations. Attackers can exploit this vulnerability to cause buffer overflow or heap overflow, etc. The following products and versions are affected: RICOH SP C250SF with firmware prior to 1.07; SP C252SF with firmware prior to 1.07; SP C250DN with firmware prior to 1.13; SP C252DN with firmware prior to 1.13",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-14305"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "VULHUB",
"id": "VHN-146238"
}
],
"trust": 1.71
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-14305",
"trust": 2.6
},
{
"db": "JVN",
"id": "JVN11708203",
"trust": 2.5
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058",
"trust": 1.4
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2000",
"trust": 0.7
},
{
"db": "OTHER",
"id": "NONE",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-146238",
"trust": 0.1
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULHUB",
"id": "VHN-146238"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2000"
},
{
"db": "NVD",
"id": "CVE-2019-14305"
}
]
},
"id": "VAR-201908-0931",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULHUB",
"id": "VHN-146238"
}
],
"trust": 0.7948717999999999
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"home \u0026 office device"
],
"sub_category": "printer",
"trust": 0.1
}
],
"sources": [
{
"db": "OTHER",
"id": null
}
]
},
"last_update_date": "2025-01-30T21:10:19.113000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Potential security vulnerabilities in some of Ricoh\u2019s printers and Multifunction Printers (MFPs)",
"trust": 0.8,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"title": "Multiple RICOH Product security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=97476"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2000"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-146238"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "NVD",
"id": "CVE-2019-14305"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.1,
"url": "http://jvn.jp/en/jp/jvn11708203/index.html"
},
{
"trust": 1.7,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14305"
},
{
"trust": 1.1,
"url": "https://www.ricoh-usa.com/en/support-and-download"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14300"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14305"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14307"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14308"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14308"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14300"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14307"
},
{
"trust": 0.6,
"url": "https://jvndb.jvn.jp/en/contents/2019/jvndb-2019-000058.html"
},
{
"trust": 0.1,
"url": "https://ieeexplore.ieee.org/abstract/document/10769424"
}
],
"sources": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULHUB",
"id": "VHN-146238"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2000"
},
{
"db": "NVD",
"id": "CVE-2019-14305"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "OTHER",
"id": null
},
{
"db": "VULHUB",
"id": "VHN-146238"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2000"
},
{
"db": "NVD",
"id": "CVE-2019-14305"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-08-26T00:00:00",
"db": "VULHUB",
"id": "VHN-146238"
},
{
"date": "2019-09-13T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"date": "2019-08-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201908-2000"
},
{
"date": "2019-08-26T15:15:11.737000",
"db": "NVD",
"id": "CVE-2019-14305"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-09-13T00:00:00",
"db": "VULHUB",
"id": "VHN-146238"
},
{
"date": "2019-09-13T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"date": "2019-09-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201908-2000"
},
{
"date": "2024-11-21T04:26:27.340000",
"db": "NVD",
"id": "CVE-2019-14305"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201908-2000"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple buffer overflow vulnerabilities in multiple Ricoh printers and Multifunction Printers (MFPs)",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201908-2000"
}
],
"trust": 0.6
}
}
VAR-202003-0929
Vulnerability from variot - Updated: 2024-11-23 23:11Ricoh SP C250DN 1.05 devices allow denial of service (issue 1 of 3). Some Ricoh printers were affected by a wrong LPD service implementation that lead to a denial of service vulnerability. plural Ricoh SP C250DN The device contains an input verification vulnerability.Service operation interruption (DoS) It may be put into a state. RICOH SP C250DN is a printer from RICOH Corporation of Japan.
There is a security vulnerability in Ricoh SP C250DN version 1.05
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202003-0929",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sp c250dn",
"scope": "eq",
"trust": 2.4,
"vendor": "ricoh",
"version": "1.05"
},
{
"model": "sp c250sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "*"
},
{
"model": "sp c252dn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "*"
},
{
"model": "sp c252sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "*"
},
{
"model": "sp c250sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252dn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19580"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014958"
},
{
"db": "NVD",
"id": "CVE-2019-14303"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014958"
}
]
},
"cve": "CVE-2019-14303",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2019-14303",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Partial",
"baseScore": 5.0,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "JVNDB-2019-014958",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CNVD-2020-19580",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"id": "CVE-2019-14303",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "JVNDB-2019-014958",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-14303",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "JVNDB-2019-014958",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2020-19580",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-202003-864",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19580"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014958"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-864"
},
{
"db": "NVD",
"id": "CVE-2019-14303"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Ricoh SP C250DN 1.05 devices allow denial of service (issue 1 of 3). Some Ricoh printers were affected by a wrong LPD service implementation that lead to a denial of service vulnerability. plural Ricoh SP C250DN The device contains an input verification vulnerability.Service operation interruption (DoS) It may be put into a state. RICOH SP C250DN is a printer from RICOH Corporation of Japan. \n\r\n\r\nThere is a security vulnerability in Ricoh SP C250DN version 1.05",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-14303"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014958"
},
{
"db": "CNVD",
"id": "CNVD-2020-19580"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-14303",
"trust": 3.0
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014958",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2020-19580",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202003-864",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19580"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014958"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-864"
},
{
"db": "NVD",
"id": "CVE-2019-14303"
}
]
},
"id": "VAR-202003-0929",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19580"
}
],
"trust": 1.1948718
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19580"
}
]
},
"last_update_date": "2024-11-23T23:11:32.612000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Support \u0026 Downloads",
"trust": 0.8,
"url": "https://www.ricoh-usa.com/en/support-and-download"
},
{
"title": "Patch for RICOH SP C250DN Denial of Service Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/211075"
},
{
"title": "RICOH SP C250DN Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=112084"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19580"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014958"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-864"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
},
{
"problemtype": "CWE-20",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014958"
},
{
"db": "NVD",
"id": "CVE-2019-14303"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.2,
"url": "https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-ricoh-printers/"
},
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14303"
},
{
"trust": 1.6,
"url": "https://www.ricoh-usa.com/en/support-and-download"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14303"
},
{
"trust": 0.8,
"url": "https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-ricoh-printers/#f"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19580"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014958"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-864"
},
{
"db": "NVD",
"id": "CVE-2019-14303"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2020-19580"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014958"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-864"
},
{
"db": "NVD",
"id": "CVE-2019-14303"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-03-26T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-19580"
},
{
"date": "2020-03-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014958"
},
{
"date": "2020-03-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-864"
},
{
"date": "2020-03-13T19:15:16.760000",
"db": "NVD",
"id": "CVE-2019-14303"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-03-26T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-19580"
},
{
"date": "2020-03-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014958"
},
{
"date": "2020-08-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-864"
},
{
"date": "2024-11-21T04:26:26.993000",
"db": "NVD",
"id": "CVE-2019-14303"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-864"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Ricoh SP C250DN Input verification vulnerabilities on devices",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014958"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "input validation error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-864"
}
],
"trust": 0.6
}
}
VAR-201908-0936
Vulnerability from variot - Updated: 2024-11-23 22:29Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-::::::: up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:::::::, cpe:2.3:o:ricoh:sp_c252dn:-:::::::. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-::::::: up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:::::::, cpe:2.3:o:ricoh:sp_c252sf:-:::::::. Multiple printers and Multifunction Printers (MFPs) provided by RICOH COMPANY, LTD. contain multiple buffer overflows vulnerabilities listed below. * Buffer overflow in parsing HTTP cookie header (CWE-119) - CVE-2019-14300 * Buffer overflow in parsing HTTP parameter setting for Wifi, mDNS, POP3, SMTP and alert (CWE-119) - CVE-2019-14305 * Buffer overflow in parsing HTTP parameter setting for SNMP (CWE-119) - CVE-2019-14307 * Buffer overflow in parsing LPD packet (CWE-119) - CVE-2019-14308 RICOH COMPANY, LTD. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and RICOH COMPANY, LTD. coordinated under the Information Security Early Warning Partnership.A remote attacker may be able to cause a denial-of-service (DoS) condition or may execute arbitrary code. RICOH SP C252SF, etc. A buffer error vulnerability exists in several RICOH printers. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations. Attackers can exploit this vulnerability to cause buffer overflow or heap overflow, etc. The following products and versions are affected: RICOH SP C250SF with firmware prior to 1.07; SP C252SF with firmware prior to 1.07; SP C250DN with firmware prior to 1.13; SP C252DN with firmware prior to 1.13
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201908-0936",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sp c252sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "sp c252dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp c250sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "sp c250dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp c250dn",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.13"
},
{
"model": "sp c250sf",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.13"
},
{
"model": "sp c252dn",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.07"
},
{
"model": "sp c252sf",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.07"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "NVD",
"id": "CVE-2019-14300"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
}
]
},
"cve": "CVE-2019-14300",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "IPA",
"availabilityImpact": "Partial",
"baseScore": 7.5,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2019-000058",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 3.2,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2019-14300",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-146233",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "IPA",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2019-000058",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 3.2,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-14300",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 2.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "IPA",
"id": "JVNDB-2019-000058",
"trust": 3.2,
"value": "Critical"
},
{
"author": "nvd@nist.gov",
"id": "CVE-2019-14300",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "cve@mitre.org",
"id": "CVE-2019-14300",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "CNNVD",
"id": "CNNVD-201908-2001",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-146233",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-146233"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2001"
},
{
"db": "NVD",
"id": "CVE-2019-14300"
},
{
"db": "NVD",
"id": "CVE-2019-14300"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*. Multiple printers and Multifunction Printers (MFPs) provided by RICOH COMPANY, LTD. contain multiple buffer overflows vulnerabilities listed below. * Buffer overflow in parsing HTTP cookie header (CWE-119) - CVE-2019-14300 * Buffer overflow in parsing HTTP parameter setting for Wifi, mDNS, POP3, SMTP and alert (CWE-119) - CVE-2019-14305 * Buffer overflow in parsing HTTP parameter setting for SNMP (CWE-119) - CVE-2019-14307 * Buffer overflow in parsing LPD packet (CWE-119) - CVE-2019-14308 RICOH COMPANY, LTD. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and RICOH COMPANY, LTD. coordinated under the Information Security Early Warning Partnership.A remote attacker may be able to cause a denial-of-service (DoS) condition or may execute arbitrary code. RICOH SP C252SF, etc. A buffer error vulnerability exists in several RICOH printers. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations. Attackers can exploit this vulnerability to cause buffer overflow or heap overflow, etc. The following products and versions are affected: RICOH SP C250SF with firmware prior to 1.07; SP C252SF with firmware prior to 1.07; SP C250DN with firmware prior to 1.13; SP C252DN with firmware prior to 1.13",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-14300"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "VULHUB",
"id": "VHN-146233"
}
],
"trust": 1.71
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-14300",
"trust": 2.5
},
{
"db": "JVN",
"id": "JVN11708203",
"trust": 2.5
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058",
"trust": 1.4
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2001",
"trust": 0.7
},
{
"db": "VULHUB",
"id": "VHN-146233",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-146233"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2001"
},
{
"db": "NVD",
"id": "CVE-2019-14300"
}
]
},
"id": "VAR-201908-0936",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-146233"
}
],
"trust": 0.6948717999999999
},
"last_update_date": "2024-11-23T22:29:58.503000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Potential security vulnerabilities in some of Ricoh\u2019s printers and Multifunction Printers (MFPs)",
"trust": 0.8,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"title": "Multiple RICOH Product Buffer Error Vulnerability Fix",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=97477"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2001"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-146233"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "NVD",
"id": "CVE-2019-14300"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.1,
"url": "http://jvn.jp/en/jp/jvn11708203/index.html"
},
{
"trust": 1.7,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14300"
},
{
"trust": 1.1,
"url": "https://www.ricoh-usa.com/en/support-and-download"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14300"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14305"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14307"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14308"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14308"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14305"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14307"
},
{
"trust": 0.6,
"url": "https://jvndb.jvn.jp/en/contents/2019/jvndb-2019-000058.html"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-146233"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2001"
},
{
"db": "NVD",
"id": "CVE-2019-14300"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-146233"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2001"
},
{
"db": "NVD",
"id": "CVE-2019-14300"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-08-26T00:00:00",
"db": "VULHUB",
"id": "VHN-146233"
},
{
"date": "2019-09-13T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"date": "2019-08-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201908-2001"
},
{
"date": "2019-08-26T15:15:11.687000",
"db": "NVD",
"id": "CVE-2019-14300"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-09-13T00:00:00",
"db": "VULHUB",
"id": "VHN-146233"
},
{
"date": "2019-09-13T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"date": "2019-09-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201908-2001"
},
{
"date": "2024-11-21T04:26:24.987000",
"db": "NVD",
"id": "CVE-2019-14300"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201908-2001"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple buffer overflow vulnerabilities in multiple Ricoh printers and Multifunction Printers (MFPs)",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201908-2001"
}
],
"trust": 0.6
}
}
VAR-201908-0932
Vulnerability from variot - Updated: 2024-11-23 22:29Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-::::::: up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:::::::, cpe:2.3:o:ricoh:sp_c252dn:-:::::::. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-::::::: up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:::::::, cpe:2.3:o:ricoh:sp_c252sf:-:::::::. Multiple printers and Multifunction Printers (MFPs) provided by RICOH COMPANY, LTD. contain multiple buffer overflows vulnerabilities listed below. * Buffer overflow in parsing HTTP cookie header (CWE-119) - CVE-2019-14300 * Buffer overflow in parsing HTTP parameter setting for Wifi, mDNS, POP3, SMTP and alert (CWE-119) - CVE-2019-14305 * Buffer overflow in parsing HTTP parameter setting for SNMP (CWE-119) - CVE-2019-14307 * Buffer overflow in parsing LPD packet (CWE-119) - CVE-2019-14308 RICOH COMPANY, LTD. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and RICOH COMPANY, LTD. coordinated under the Information Security Early Warning Partnership.A remote attacker may be able to cause a denial-of-service (DoS) condition or may execute arbitrary code. RICOH SP C252SF, etc. A buffer error vulnerability exists in several RICOH products. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations. Attackers can exploit this vulnerability to cause buffer overflow or heap overflow, etc. The following products and versions are affected: RICOH SP C250SF with firmware prior to 1.07; SP C252SF with firmware prior to 1.07; SP C250DN with firmware prior to 1.13; SP C252DN with firmware prior to 1.13
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201908-0932",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sp c252sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "sp c252dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp c250sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "sp c250dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp c250dn",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.13"
},
{
"model": "sp c250sf",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.13"
},
{
"model": "sp c252dn",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.07"
},
{
"model": "sp c252sf",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.07"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "NVD",
"id": "CVE-2019-14307"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
}
]
},
"cve": "CVE-2019-14307",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "IPA",
"availabilityImpact": "Partial",
"baseScore": 7.5,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2019-000058",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 3.2,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2019-14307",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-146240",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "IPA",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2019-000058",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 3.2,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-14307",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "cve@mitre.org",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2019-14307",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "IPA",
"id": "JVNDB-2019-000058",
"trust": 3.2,
"value": "Critical"
},
{
"author": "nvd@nist.gov",
"id": "CVE-2019-14307",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "cve@mitre.org",
"id": "CVE-2019-14307",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201908-2007",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-146240",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-146240"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2007"
},
{
"db": "NVD",
"id": "CVE-2019-14307"
},
{
"db": "NVD",
"id": "CVE-2019-14307"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*. Multiple printers and Multifunction Printers (MFPs) provided by RICOH COMPANY, LTD. contain multiple buffer overflows vulnerabilities listed below. * Buffer overflow in parsing HTTP cookie header (CWE-119) - CVE-2019-14300 * Buffer overflow in parsing HTTP parameter setting for Wifi, mDNS, POP3, SMTP and alert (CWE-119) - CVE-2019-14305 * Buffer overflow in parsing HTTP parameter setting for SNMP (CWE-119) - CVE-2019-14307 * Buffer overflow in parsing LPD packet (CWE-119) - CVE-2019-14308 RICOH COMPANY, LTD. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and RICOH COMPANY, LTD. coordinated under the Information Security Early Warning Partnership.A remote attacker may be able to cause a denial-of-service (DoS) condition or may execute arbitrary code. RICOH SP C252SF, etc. A buffer error vulnerability exists in several RICOH products. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations. Attackers can exploit this vulnerability to cause buffer overflow or heap overflow, etc. The following products and versions are affected: RICOH SP C250SF with firmware prior to 1.07; SP C252SF with firmware prior to 1.07; SP C250DN with firmware prior to 1.13; SP C252DN with firmware prior to 1.13",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-14307"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "VULHUB",
"id": "VHN-146240"
}
],
"trust": 1.71
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-14307",
"trust": 2.5
},
{
"db": "JVN",
"id": "JVN11708203",
"trust": 2.5
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058",
"trust": 1.4
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2007",
"trust": 0.7
},
{
"db": "VULHUB",
"id": "VHN-146240",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-146240"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2007"
},
{
"db": "NVD",
"id": "CVE-2019-14307"
}
]
},
"id": "VAR-201908-0932",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-146240"
}
],
"trust": 0.6948717999999999
},
"last_update_date": "2024-11-23T22:29:58.477000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Potential security vulnerabilities in some of Ricoh\u2019s printers and Multifunction Printers (MFPs)",
"trust": 0.8,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"title": "Multiple RICOH Product Buffer Error Vulnerability Fix",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=97483"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2007"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-146240"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "NVD",
"id": "CVE-2019-14307"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://jvn.jp/en/jp/jvn11708203/index.html"
},
{
"trust": 1.7,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14307"
},
{
"trust": 1.1,
"url": "https://www.ricoh-usa.com/en/support-and-download"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14300"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14305"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14307"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14308"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14308"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14300"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14305"
},
{
"trust": 0.6,
"url": "https://jvn.jp/en/jp/jvn11708203/index.html ,"
},
{
"trust": 0.6,
"url": "https://jvndb.jvn.jp/en/contents/2019/jvndb-2019-000058.html"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-146240"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2007"
},
{
"db": "NVD",
"id": "CVE-2019-14307"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-146240"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-2007"
},
{
"db": "NVD",
"id": "CVE-2019-14307"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-08-26T00:00:00",
"db": "VULHUB",
"id": "VHN-146240"
},
{
"date": "2019-09-13T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"date": "2019-08-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201908-2007"
},
{
"date": "2019-08-26T15:15:11.797000",
"db": "NVD",
"id": "CVE-2019-14307"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-09-13T00:00:00",
"db": "VULHUB",
"id": "VHN-146240"
},
{
"date": "2019-09-13T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"date": "2019-09-18T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201908-2007"
},
{
"date": "2024-11-21T04:26:27.720000",
"db": "NVD",
"id": "CVE-2019-14307"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201908-2007"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple buffer overflow vulnerabilities in multiple Ricoh printers and Multifunction Printers (MFPs)",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201908-2007"
}
],
"trust": 0.6
}
}
VAR-201908-0933
Vulnerability from variot - Updated: 2024-11-23 22:29Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted requests to the LPD service. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-::::::: up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:::::::, cpe:2.3:o:ricoh:sp_c252dn:-:::::::. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-::::::: up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:::::::, cpe:2.3:o:ricoh:sp_c252sf:-:::::::. Multiple printers and Multifunction Printers (MFPs) provided by RICOH COMPANY, LTD. contain multiple buffer overflows vulnerabilities listed below. * Buffer overflow in parsing HTTP cookie header (CWE-119) - CVE-2019-14300 * Buffer overflow in parsing HTTP parameter setting for Wifi, mDNS, POP3, SMTP and alert (CWE-119) - CVE-2019-14305 * Buffer overflow in parsing HTTP parameter setting for SNMP (CWE-119) - CVE-2019-14307 * Buffer overflow in parsing LPD packet (CWE-119) - CVE-2019-14308 RICOH COMPANY, LTD. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and RICOH COMPANY, LTD. coordinated under the Information Security Early Warning Partnership.A remote attacker may be able to cause a denial-of-service (DoS) condition or may execute arbitrary code. RICOH SP C252SF, etc. A buffer error vulnerability exists in several RICOH printers. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations. Attackers can exploit this vulnerability to cause buffer overflow or heap overflow, etc. The following products and versions are affected: RICOH SP C250SF with firmware prior to 1.07; SP C252SF with firmware prior to 1.07; SP C250DN with firmware prior to 1.13; SP C252DN with firmware prior to 1.13
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201908-0933",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sp c252sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "sp c252dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp c250sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "sp c250dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp c250dn",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.13"
},
{
"model": "sp c250sf",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.13"
},
{
"model": "sp c252dn",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.07"
},
{
"model": "sp c252sf",
"scope": "eq",
"trust": 0.8,
"vendor": "ricoh",
"version": "firmware prior to ver.1.07"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "NVD",
"id": "CVE-2019-14308"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
}
]
},
"cve": "CVE-2019-14308",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "IPA",
"availabilityImpact": "Partial",
"baseScore": 7.5,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2019-000058",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 3.2,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2019-14308",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-146241",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "IPA",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2019-000058",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 3.2,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-14308",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 2.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "IPA",
"id": "JVNDB-2019-000058",
"trust": 3.2,
"value": "Critical"
},
{
"author": "nvd@nist.gov",
"id": "CVE-2019-14308",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "cve@mitre.org",
"id": "CVE-2019-14308",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "CNNVD",
"id": "CNNVD-201908-1998",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-146241",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-146241"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-1998"
},
{
"db": "NVD",
"id": "CVE-2019-14308"
},
{
"db": "NVD",
"id": "CVE-2019-14308"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted requests to the LPD service. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*. Multiple printers and Multifunction Printers (MFPs) provided by RICOH COMPANY, LTD. contain multiple buffer overflows vulnerabilities listed below. * Buffer overflow in parsing HTTP cookie header (CWE-119) - CVE-2019-14300 * Buffer overflow in parsing HTTP parameter setting for Wifi, mDNS, POP3, SMTP and alert (CWE-119) - CVE-2019-14305 * Buffer overflow in parsing HTTP parameter setting for SNMP (CWE-119) - CVE-2019-14307 * Buffer overflow in parsing LPD packet (CWE-119) - CVE-2019-14308 RICOH COMPANY, LTD. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and RICOH COMPANY, LTD. coordinated under the Information Security Early Warning Partnership.A remote attacker may be able to cause a denial-of-service (DoS) condition or may execute arbitrary code. RICOH SP C252SF, etc. A buffer error vulnerability exists in several RICOH printers. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations. Attackers can exploit this vulnerability to cause buffer overflow or heap overflow, etc. The following products and versions are affected: RICOH SP C250SF with firmware prior to 1.07; SP C252SF with firmware prior to 1.07; SP C250DN with firmware prior to 1.13; SP C252DN with firmware prior to 1.13",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-14308"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "VULHUB",
"id": "VHN-146241"
}
],
"trust": 1.71
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-14308",
"trust": 2.5
},
{
"db": "JVN",
"id": "JVN11708203",
"trust": 2.5
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058",
"trust": 1.4
},
{
"db": "CNNVD",
"id": "CNNVD-201908-1998",
"trust": 0.7
},
{
"db": "VULHUB",
"id": "VHN-146241",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-146241"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-1998"
},
{
"db": "NVD",
"id": "CVE-2019-14308"
}
]
},
"id": "VAR-201908-0933",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-146241"
}
],
"trust": 0.6948717999999999
},
"last_update_date": "2024-11-23T22:29:58.451000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Potential security vulnerabilities in some of Ricoh\u2019s printers and Multifunction Printers (MFPs)",
"trust": 0.8,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"title": "Multiple RICOH Product security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=97474"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-1998"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-146241"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "NVD",
"id": "CVE-2019-14308"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://jvn.jp/en/jp/jvn11708203/index.html"
},
{
"trust": 1.7,
"url": "https://www.ricoh-usa.com/en/support-and-download"
},
{
"trust": 1.7,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"trust": 1.4,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14308"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14300"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14305"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14307"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14308"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14300"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14305"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14307"
},
{
"trust": 0.6,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14307 ,"
},
{
"trust": 0.6,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14305 ,"
},
{
"trust": 0.6,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14300 ,"
},
{
"trust": 0.6,
"url": "https://jvn.jp/en/jp/jvn11708203/index.html ,"
},
{
"trust": 0.6,
"url": "https://jvndb.jvn.jp/en/contents/2019/jvndb-2019-000058.html"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-146241"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-1998"
},
{
"db": "NVD",
"id": "CVE-2019-14308"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-146241"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"db": "CNNVD",
"id": "CNNVD-201908-1998"
},
{
"db": "NVD",
"id": "CVE-2019-14308"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-08-26T00:00:00",
"db": "VULHUB",
"id": "VHN-146241"
},
{
"date": "2019-09-13T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"date": "2019-08-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201908-1998"
},
{
"date": "2019-08-26T14:15:10.797000",
"db": "NVD",
"id": "CVE-2019-14308"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-09-13T00:00:00",
"db": "VULHUB",
"id": "VHN-146241"
},
{
"date": "2019-09-13T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-000058"
},
{
"date": "2019-09-16T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201908-1998"
},
{
"date": "2024-11-21T04:26:27.880000",
"db": "NVD",
"id": "CVE-2019-14308"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201908-1998"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple buffer overflow vulnerabilities in multiple Ricoh printers and Multifunction Printers (MFPs)",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-000058"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201908-1998"
}
],
"trust": 0.6
}
}
VAR-202003-0926
Vulnerability from variot - Updated: 2024-11-23 22:29Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders. plural Ricoh SP C250DN A device contains a vulnerability in the use of hard-coded credentials.Information may be obtained. RICOH SP C250DN is a printer from RICOH Corporation of Japan.
There is a security vulnerability in Ricoh SP C250DN version 1.05
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202003-0926",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sp c250dn",
"scope": "eq",
"trust": 2.4,
"vendor": "ricoh",
"version": "1.05"
},
{
"model": "sp c250sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "*"
},
{
"model": "sp c252dn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "*"
},
{
"model": "sp c252sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "*"
},
{
"model": "sp c250sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252dn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19587"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014959"
},
{
"db": "NVD",
"id": "CVE-2019-14309"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014959"
}
]
},
"cve": "CVE-2019-14309",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2019-14309",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.0,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2019-014959",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 7.8,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2020-19587",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-14309",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2019-014959",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-14309",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "JVNDB-2019-014959",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2020-19587",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-202003-866",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19587"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014959"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-866"
},
{
"db": "NVD",
"id": "CVE-2019-14309"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders. plural Ricoh SP C250DN A device contains a vulnerability in the use of hard-coded credentials.Information may be obtained. RICOH SP C250DN is a printer from RICOH Corporation of Japan. \n\r\n\r\nThere is a security vulnerability in Ricoh SP C250DN version 1.05",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-14309"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014959"
},
{
"db": "CNVD",
"id": "CNVD-2020-19587"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-14309",
"trust": 3.0
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014959",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2020-19587",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202003-866",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19587"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014959"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-866"
},
{
"db": "NVD",
"id": "CVE-2019-14309"
}
]
},
"id": "VAR-202003-0926",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19587"
}
],
"trust": 1.1948718
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19587"
}
]
},
"last_update_date": "2024-11-23T22:29:41.450000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Support \u0026 Downloads",
"trust": 0.8,
"url": "https://www.ricoh-usa.com/en/support-and-download"
},
{
"title": "Patch for RICOH SP C250DN Trust Management Issue Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/211085"
},
{
"title": "RICOH SP C250DN Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=112086"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19587"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014959"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-866"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-798",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014959"
},
{
"db": "NVD",
"id": "CVE-2019-14309"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.2,
"url": "https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-ricoh-printers/"
},
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14309"
},
{
"trust": 1.6,
"url": "https://www.ricoh-usa.com/en/support-and-download"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14309"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19587"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014959"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-866"
},
{
"db": "NVD",
"id": "CVE-2019-14309"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2020-19587"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014959"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-866"
},
{
"db": "NVD",
"id": "CVE-2019-14309"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-03-26T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-19587"
},
{
"date": "2020-03-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014959"
},
{
"date": "2020-03-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-866"
},
{
"date": "2020-03-13T19:15:16.837000",
"db": "NVD",
"id": "CVE-2019-14309"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-03-26T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-19587"
},
{
"date": "2020-03-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014959"
},
{
"date": "2020-03-19T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-866"
},
{
"date": "2024-11-21T04:26:28.030000",
"db": "NVD",
"id": "CVE-2019-14309"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-866"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "RICOH SP C250DN Trust Management Issue Vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19587"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-866"
}
],
"trust": 1.2
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "trust management problem",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-866"
}
],
"trust": 0.6
}
}
VAR-202001-0767
Vulnerability from variot - Updated: 2024-11-23 21:36Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2). Ricoh SP C250DN The device contains an authentication vulnerability.Information may be obtained. RICOH SP C250DN is a printer from Ricoh Japan.
An information disclosure vulnerability exists in RICOH SP C250DN version 1.06. The vulnerability stems from configuration errors during the operation of the network system or product. An unauthorized attacker could use the vulnerability to obtain sensitive information about the affected component
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202001-0767",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sp c250dn",
"scope": "eq",
"trust": 1.4,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "m c250fw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp 277sfnwx",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp c250dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.09"
},
{
"model": "sp 221",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp c250sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.15"
},
{
"model": "sp 3710dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 212w",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp c261sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.17"
},
{
"model": "sp 212sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.08"
},
{
"model": "sp c262dnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "sp c260dnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp 213snw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.05"
},
{
"model": "sp c260sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.15"
},
{
"model": "sp c252dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.09"
},
{
"model": "m 2700",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 212sfnw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.08"
},
{
"model": "sp c252sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.15"
},
{
"model": "sp 3710sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 221snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.11"
},
{
"model": "sp 213sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213w",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 213nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "p c301w",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp c262sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.17"
},
{
"model": "mp 2014ad",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp 212sfw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.08"
},
{
"model": "sp c261dnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "m c250fwb",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp277nwx",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "sp 220sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "m 2701",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 213nw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "p c300w",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp 330dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 212nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 277snwx",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp 221sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.11"
},
{
"model": "sp 212suw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213sfnw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 330sfn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213suw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "mp 2014",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp 330sn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 221sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp 220snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.11"
},
{
"model": "sp 213snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213sfw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 212snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 221s",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp 220nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "mp 2014d",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp 221nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "m c250fw",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "m c250fwb",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "p c300w",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "p c301w",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 330sfn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 330sn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c250sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252dn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02455"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014136"
},
{
"db": "NVD",
"id": "CVE-2019-14301"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:ricoh:m_c250fw_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:m_c250fwb_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:p_c300w_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:p_c301w_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_330sfn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_330sn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014136"
}
]
},
"cve": "CVE-2019-14301",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2019-14301",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.9,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2020-02455",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-14301",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2019-14301",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-14301",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2019-14301",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2020-02455",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-202001-406",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2019-14301",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02455"
},
{
"db": "VULMON",
"id": "CVE-2019-14301"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014136"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-406"
},
{
"db": "NVD",
"id": "CVE-2019-14301"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2). Ricoh SP C250DN The device contains an authentication vulnerability.Information may be obtained. RICOH SP C250DN is a printer from Ricoh Japan. \n\nAn information disclosure vulnerability exists in RICOH SP C250DN version 1.06. The vulnerability stems from configuration errors during the operation of the network system or product. An unauthorized attacker could use the vulnerability to obtain sensitive information about the affected component",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-14301"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014136"
},
{
"db": "CNVD",
"id": "CNVD-2020-02455"
},
{
"db": "VULMON",
"id": "CVE-2019-14301"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-14301",
"trust": 3.1
},
{
"db": "JVN",
"id": "JVN52962201",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014136",
"trust": 1.4
},
{
"db": "CNVD",
"id": "CNVD-2020-02455",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202001-406",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2019-14301",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02455"
},
{
"db": "VULMON",
"id": "CVE-2019-14301"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014136"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-406"
},
{
"db": "NVD",
"id": "CVE-2019-14301"
}
]
},
"id": "VAR-202001-0767",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02455"
}
],
"trust": 1.1948718
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02455"
}
]
},
"last_update_date": "2024-11-23T21:36:14.327000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "UPDATE\uff1aPotential security vulnerabilities in some of Ricoh\u0027s printers and Multifunction Printers (MFPs)",
"trust": 0.8,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"title": "Patch for RICOH SP C250DN Information Disclosure Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/197267"
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2019-14301 "
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02455"
},
{
"db": "VULMON",
"id": "CVE-2019-14301"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014136"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.0
},
{
"problemtype": "CWE-287",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014136"
},
{
"db": "NVD",
"id": "CVE-2019-14301"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14301"
},
{
"trust": 1.7,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"trust": 1.7,
"url": "http://jvn.jp/en/jp/jvn52962201/index.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14301"
},
{
"trust": 0.6,
"url": "https://jvndb.jvn.jp/en/contents/2019/jvndb-2019-014136.html"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/200.html"
},
{
"trust": 0.1,
"url": "https://github.com/live-hack-cve/cve-2019-14301"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02455"
},
{
"db": "VULMON",
"id": "CVE-2019-14301"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014136"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-406"
},
{
"db": "NVD",
"id": "CVE-2019-14301"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2020-02455"
},
{
"db": "VULMON",
"id": "CVE-2019-14301"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014136"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-406"
},
{
"db": "NVD",
"id": "CVE-2019-14301"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-01-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-02455"
},
{
"date": "2020-01-10T00:00:00",
"db": "VULMON",
"id": "CVE-2019-14301"
},
{
"date": "2020-02-04T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014136"
},
{
"date": "2020-01-10T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202001-406"
},
{
"date": "2020-01-10T18:15:11.333000",
"db": "NVD",
"id": "CVE-2019-14301"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-01-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-02455"
},
{
"date": "2023-02-01T00:00:00",
"db": "VULMON",
"id": "CVE-2019-14301"
},
{
"date": "2020-02-04T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014136"
},
{
"date": "2023-02-02T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202001-406"
},
{
"date": "2024-11-21T04:26:26.527000",
"db": "NVD",
"id": "CVE-2019-14301"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202001-406"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "RICOH SP C250DN Information Disclosure Vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02455"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-406"
}
],
"trust": 1.2
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202001-406"
}
],
"trust": 0.6
}
}
VAR-202001-0764
Vulnerability from variot - Updated: 2024-11-23 21:36Ricoh SP C250DN 1.06 devices allow CSRF. Ricoh SP C250DN The device contains a cross-site request forgery vulnerability.Information is acquired, information is falsified, and denial of service (DoS) May be in a state. RICOH SP C250DN is a printer from Ricoh Japan. The vulnerability stems from a web application's insufficient verification that the request came from a trusted user. An attacker could use this vulnerability to send an unexpected request to the server through an affected client
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202001-0764",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "m c250fw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp 277sfnwx",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp c250dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.09"
},
{
"model": "sp 221",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp c250sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.15"
},
{
"model": "sp 3710dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 212w",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp c261sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.17"
},
{
"model": "sp 212sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.08"
},
{
"model": "sp c262dnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "sp c260dnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp 213snw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.05"
},
{
"model": "sp c260sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.15"
},
{
"model": "sp c252dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.09"
},
{
"model": "m 2700",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 212sfnw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.08"
},
{
"model": "sp c252sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.15"
},
{
"model": "sp 3710sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 221snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.11"
},
{
"model": "sp 213sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213w",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 213nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "p c301w",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp c262sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.17"
},
{
"model": "mp 2014ad",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp 212sfw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.08"
},
{
"model": "sp c261dnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "m c250fwb",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp277nwx",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "sp 220sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "m 2701",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 213nw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "p c300w",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp 330dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 212nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 277snwx",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp 221sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.11"
},
{
"model": "sp 212suw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213sfnw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 330sfn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213suw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "mp 2014",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp 330sn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 221sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp 220snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.11"
},
{
"model": "sp 213snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213sfw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 212snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 221s",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp 220nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "mp 2014d",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp 221nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "m c250fw",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "m c250fwb",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "p c300w",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "p c301w",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 330sfn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 330sn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c250dn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c250sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252dn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c250dn",
"scope": "eq",
"trust": 0.6,
"vendor": "ricoh",
"version": "1.06"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02454"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014031"
},
{
"db": "NVD",
"id": "CVE-2019-14304"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:ricoh:m_c250fw_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:m_c250fwb_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:p_c300w_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:p_c301w_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_330sfn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_330sn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014031"
}
]
},
"cve": "CVE-2019-14304",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CVE-2019-14304",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2020-02454",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 2.8,
"id": "CVE-2019-14304",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 8.8,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2019-14304",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "Required",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-14304",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2019-14304",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2020-02454",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-202001-393",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02454"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014031"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-393"
},
{
"db": "NVD",
"id": "CVE-2019-14304"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Ricoh SP C250DN 1.06 devices allow CSRF. Ricoh SP C250DN The device contains a cross-site request forgery vulnerability.Information is acquired, information is falsified, and denial of service (DoS) May be in a state. RICOH SP C250DN is a printer from Ricoh Japan. The vulnerability stems from a web application\u0027s insufficient verification that the request came from a trusted user. An attacker could use this vulnerability to send an unexpected request to the server through an affected client",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-14304"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014031"
},
{
"db": "CNVD",
"id": "CNVD-2020-02454"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-14304",
"trust": 3.0
},
{
"db": "JVN",
"id": "JVN52962201",
"trust": 1.6
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014031",
"trust": 1.4
},
{
"db": "CNVD",
"id": "CNVD-2020-02454",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202001-393",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02454"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014031"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-393"
},
{
"db": "NVD",
"id": "CVE-2019-14304"
}
]
},
"id": "VAR-202001-0764",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02454"
}
],
"trust": 1.1948718
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02454"
}
]
},
"last_update_date": "2024-11-23T21:36:14.300000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "UPDATE\uff1aPotential security vulnerabilities in some of Ricoh\u0027s printers and Multifunction Printers (MFPs)",
"trust": 0.8,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"title": "Patch for RICOH SP C250DN Cross-Site Request Forgery Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/197259"
},
{
"title": "RICOH SP C250DN Fixes for cross-site request forgery vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=108426"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02454"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014031"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-393"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-352",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014031"
},
{
"db": "NVD",
"id": "CVE-2019-14304"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14304"
},
{
"trust": 1.6,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"trust": 1.6,
"url": "http://jvn.jp/en/jp/jvn52962201/index.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14304"
},
{
"trust": 0.6,
"url": "https://jvndb.jvn.jp/en/contents/2019/jvndb-2019-014031.html"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02454"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014031"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-393"
},
{
"db": "NVD",
"id": "CVE-2019-14304"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2020-02454"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014031"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-393"
},
{
"db": "NVD",
"id": "CVE-2019-14304"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-01-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-02454"
},
{
"date": "2020-01-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014031"
},
{
"date": "2020-01-10T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202001-393"
},
{
"date": "2020-01-10T18:15:11.507000",
"db": "NVD",
"id": "CVE-2019-14304"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-01-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-02454"
},
{
"date": "2020-01-27T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014031"
},
{
"date": "2020-05-19T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202001-393"
},
{
"date": "2024-11-21T04:26:27.137000",
"db": "NVD",
"id": "CVE-2019-14304"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202001-393"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "RICOH SP C250DN Cross-Site Request Forgery Vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02454"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-393"
}
],
"trust": 1.2
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "cross-site request forgery",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202001-393"
}
],
"trust": 0.6
}
}
VAR-202001-0768
Vulnerability from variot - Updated: 2024-11-23 21:36On Ricoh SP C250DN 1.06 devices, a debug port can be used. Ricoh SP C250DN The device contains an input validation vulnerability.Information is acquired, information is falsified, and denial of service (DoS) May be in a state. RICOH SP C250DN is a printer from Ricoh Japan.
There is a security vulnerability in RICOH SP C250DN version 1.06. Attackers can use this vulnerability to retrieve sensitive information
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202001-0768",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sp c250dn",
"scope": "eq",
"trust": 1.4,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 277sfnwx",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp c250dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.09"
},
{
"model": "sp 221",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp c250sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.15"
},
{
"model": "sp 3710dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 212w",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp c261sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.17"
},
{
"model": "sp 210su \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 210e \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp 210 \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp 211sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 212sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.08"
},
{
"model": "sp c262dnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "sp c260dnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp 213snw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.05"
},
{
"model": "sp c260sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.15"
},
{
"model": "sp c252dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.09"
},
{
"model": "sp 210sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 211",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "m 2700",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 212sfnw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.08"
},
{
"model": "sp 210sf \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp c252sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.15"
},
{
"model": "sp 3710sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 221snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.11"
},
{
"model": "sp 213sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213w",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 213nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp c262sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.17"
},
{
"model": "mp 2014ad",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp c261dnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "sp277nwx",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "sp 221s",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp 220sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp 210su",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "m 2701",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 213nw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "sp 210 q \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp 330dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 210",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 212nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 210su q \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 277snwx",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp 221sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.11"
},
{
"model": "sp 212suw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213sfnw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 210sf q \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 330sfn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213suw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "mp 2014",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp 330sn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 221sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp 220snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.11"
},
{
"model": "sp 213snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213sfw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 212snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 212sfw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.08"
},
{
"model": "sp 220nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "mp 2014d",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp 221nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "sp 211su",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 330dn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 330sfn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 330sn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 3710dn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 3710sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c250sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252dn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c260dnw",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-03703"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014137"
},
{
"db": "NVD",
"id": "CVE-2019-14302"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:ricoh:sp_330dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_330sfn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_330sn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_3710dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_3710sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c260dnw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014137"
}
]
},
"cve": "CVE-2019-14302",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 7.2,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.9,
"id": "CVE-2019-14302",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.9,
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2020-03703",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 0.9,
"id": "CVE-2019-14302",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Physical",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 6.8,
"baseSeverity": "Medium",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2019-14302",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-14302",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2019-14302",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2020-03703",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-202001-391",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2019-14302",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-03703"
},
{
"db": "VULMON",
"id": "CVE-2019-14302"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014137"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-391"
},
{
"db": "NVD",
"id": "CVE-2019-14302"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "On Ricoh SP C250DN 1.06 devices, a debug port can be used. Ricoh SP C250DN The device contains an input validation vulnerability.Information is acquired, information is falsified, and denial of service (DoS) May be in a state. RICOH SP C250DN is a printer from Ricoh Japan. \n\r\n\r\nThere is a security vulnerability in RICOH SP C250DN version 1.06. Attackers can use this vulnerability to retrieve sensitive information",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-14302"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014137"
},
{
"db": "CNVD",
"id": "CNVD-2020-03703"
},
{
"db": "VULMON",
"id": "CVE-2019-14302"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-14302",
"trust": 3.1
},
{
"db": "JVN",
"id": "JVN52962201",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014137",
"trust": 1.4
},
{
"db": "CNVD",
"id": "CNVD-2020-03703",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202001-391",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2019-14302",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-03703"
},
{
"db": "VULMON",
"id": "CVE-2019-14302"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014137"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-391"
},
{
"db": "NVD",
"id": "CVE-2019-14302"
}
]
},
"id": "VAR-202001-0768",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-03703"
}
],
"trust": 1.1948718
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-03703"
}
]
},
"last_update_date": "2024-11-23T21:36:14.268000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "UPDATE\uff1aPotential security vulnerabilities in some of Ricoh\u0027s printers and Multifunction Printers (MFPs)",
"trust": 0.8,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"title": "Patch for Unknown vulnerability in RICOH SP C250DN",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/198937"
},
{
"title": "RICOH SP C250DN Enter the fix for the verification error vulnerability",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=108425"
},
{
"title": "",
"trust": 0.1,
"url": "https://github.com/Live-Hack-CVE/CVE-2019-14302 "
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-03703"
},
{
"db": "VULMON",
"id": "CVE-2019-14302"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014137"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-391"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
},
{
"problemtype": "CWE-20",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014137"
},
{
"db": "NVD",
"id": "CVE-2019-14302"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14302"
},
{
"trust": 1.7,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"trust": 1.7,
"url": "http://jvn.jp/en/jp/jvn52962201/index.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14302"
},
{
"trust": 0.6,
"url": "https://jvndb.jvn.jp/en/contents/2019/jvndb-2019-014137.html"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/.html"
},
{
"trust": 0.1,
"url": "https://github.com/live-hack-cve/cve-2019-14302"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-03703"
},
{
"db": "VULMON",
"id": "CVE-2019-14302"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014137"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-391"
},
{
"db": "NVD",
"id": "CVE-2019-14302"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2020-03703"
},
{
"db": "VULMON",
"id": "CVE-2019-14302"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014137"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-391"
},
{
"db": "NVD",
"id": "CVE-2019-14302"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-02-04T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-03703"
},
{
"date": "2020-01-10T00:00:00",
"db": "VULMON",
"id": "CVE-2019-14302"
},
{
"date": "2020-02-04T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014137"
},
{
"date": "2020-01-10T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202001-391"
},
{
"date": "2020-01-10T18:15:11.413000",
"db": "NVD",
"id": "CVE-2019-14302"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-02-04T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-03703"
},
{
"date": "2023-02-01T00:00:00",
"db": "VULMON",
"id": "CVE-2019-14302"
},
{
"date": "2020-02-04T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014137"
},
{
"date": "2020-08-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202001-391"
},
{
"date": "2024-11-21T04:26:26.787000",
"db": "NVD",
"id": "CVE-2019-14302"
}
]
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Ricoh SP C250DN Device input validation vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014137"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "input validation error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202001-391"
}
],
"trust": 0.6
}
}
VAR-202001-0765
Vulnerability from variot - Updated: 2024-11-23 21:36Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2). Ricoh SP C250DN The device contains an authentication vulnerability.Information may be obtained. RICOH SP C250DN is a printer from Ricoh Japan.
An information disclosure vulnerability exists in RICOH SP C250DN version 1.06. The vulnerability stems from configuration errors during the operation of the network system or product. An unauthorized attacker could use the vulnerability to obtain sensitive information about the affected component
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202001-0765",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sp c250dn",
"scope": "eq",
"trust": 1.4,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 277sfnwx",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp c250dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.09"
},
{
"model": "sp 221",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.02"
},
{
"model": "sp c250sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.15"
},
{
"model": "sp 3710dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 212w",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp c261sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.17"
},
{
"model": "sp 212sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.08"
},
{
"model": "sp c262dnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "sp c260dnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp 213snw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.05"
},
{
"model": "sp c260sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.15"
},
{
"model": "sp c252dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.09"
},
{
"model": "m 2700",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 212sfnw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.08"
},
{
"model": "sp c252sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.15"
},
{
"model": "sp 3710sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 221snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.11"
},
{
"model": "sp 213sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213w",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 213nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp c262sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.17"
},
{
"model": "mp 2014ad",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp c261dnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.13"
},
{
"model": "sp277nwx",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "sp 221s",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp 220sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "m 2701",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 213nw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "sp 330dn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 212nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 277snwx",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp 221sf",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.11"
},
{
"model": "sp 212suw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213sfnw \\",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 330sfn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213suw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "mp 2014",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp 330sn",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 221sfnw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.12"
},
{
"model": "sp 220snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.11"
},
{
"model": "sp 213snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 213sfw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 212snw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.07"
},
{
"model": "sp 212sfw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.08"
},
{
"model": "sp 220nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "mp 2014d",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.10"
},
{
"model": "sp 221nw",
"scope": "lt",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.04"
},
{
"model": "sp 330dn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 330sfn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 330sn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 3710dn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 3710sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c250sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252dn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c260dnw",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02453"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014138"
},
{
"db": "NVD",
"id": "CVE-2019-14306"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:ricoh:sp_330dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_330sfn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_330sn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_3710dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_3710sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c260dnw_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014138"
}
]
},
"cve": "CVE-2019-14306",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2019-14306",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2020-02453",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-14306",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 7.5,
"baseSeverity": "High",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2019-14306",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-14306",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2019-14306",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2020-02453",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-202001-394",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02453"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014138"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-394"
},
{
"db": "NVD",
"id": "CVE-2019-14306"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2). Ricoh SP C250DN The device contains an authentication vulnerability.Information may be obtained. RICOH SP C250DN is a printer from Ricoh Japan. \n\nAn information disclosure vulnerability exists in RICOH SP C250DN version 1.06. The vulnerability stems from configuration errors during the operation of the network system or product. An unauthorized attacker could use the vulnerability to obtain sensitive information about the affected component",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-14306"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014138"
},
{
"db": "CNVD",
"id": "CNVD-2020-02453"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-14306",
"trust": 3.0
},
{
"db": "JVN",
"id": "JVN52962201",
"trust": 1.6
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014138",
"trust": 1.4
},
{
"db": "CNVD",
"id": "CNVD-2020-02453",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202001-394",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02453"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014138"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-394"
},
{
"db": "NVD",
"id": "CVE-2019-14306"
}
]
},
"id": "VAR-202001-0765",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02453"
}
],
"trust": 1.1948718
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02453"
}
]
},
"last_update_date": "2024-11-23T21:36:14.240000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "UPDATE\uff1aPotential security vulnerabilities in some of Ricoh\u0027s printers and Multifunction Printers (MFPs)",
"trust": 0.8,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"title": "Patch for RICOH SP C250DN Information Disclosure Vulnerability (CNVD-2020-02453)",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/197265"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02453"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014138"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
},
{
"problemtype": "CWE-287",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014138"
},
{
"db": "NVD",
"id": "CVE-2019-14306"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14306"
},
{
"trust": 1.6,
"url": "https://www.ricoh.com/info/2019/0823_1/"
},
{
"trust": 1.6,
"url": "http://jvn.jp/en/jp/jvn52962201/index.html"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14306"
},
{
"trust": 0.6,
"url": "https://jvndb.jvn.jp/en/contents/2019/jvndb-2019-014138.html"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-02453"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014138"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-394"
},
{
"db": "NVD",
"id": "CVE-2019-14306"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2020-02453"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014138"
},
{
"db": "CNNVD",
"id": "CNNVD-202001-394"
},
{
"db": "NVD",
"id": "CVE-2019-14306"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-01-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-02453"
},
{
"date": "2020-02-04T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014138"
},
{
"date": "2020-01-10T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202001-394"
},
{
"date": "2020-01-10T18:15:11.583000",
"db": "NVD",
"id": "CVE-2019-14306"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-01-16T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-02453"
},
{
"date": "2020-02-04T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014138"
},
{
"date": "2020-08-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202001-394"
},
{
"date": "2024-11-21T04:26:27.530000",
"db": "NVD",
"id": "CVE-2019-14306"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202001-394"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Ricoh SP C250DN Authentication vulnerabilities in devices",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014138"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "authorization issue",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202001-394"
}
],
"trust": 0.6
}
}
VAR-202003-0927
Vulnerability from variot - Updated: 2024-11-23 21:36Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3). Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identified in the way of how the embedded device parsed the IPP packets. plural Ricoh SP C250DN A buffer error vulnerability exists in the device.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. RICOH SP C250DN is a printer from RICOH Corporation of Japan
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202003-0927",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sp c250dn",
"scope": "eq",
"trust": 2.4,
"vendor": "ricoh",
"version": "1.05"
},
{
"model": "sp c250sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "*"
},
{
"model": "sp c252dn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "*"
},
{
"model": "sp c252sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "*"
},
{
"model": "sp c250sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252dn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19585"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014960"
},
{
"db": "NVD",
"id": "CVE-2019-14310"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014960"
}
]
},
"cve": "CVE-2019-14310",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2019-14310",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 10.0,
"confidentialityImpact": "Complete",
"exploitabilityScore": null,
"id": "JVNDB-2019-014960",
"impactScore": null,
"integrityImpact": "Complete",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2020-19585",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-14310",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2019-014960",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-14310",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "JVNDB-2019-014960",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNVD",
"id": "CNVD-2020-19585",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-202003-868",
"trust": 0.6,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19585"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014960"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-868"
},
{
"db": "NVD",
"id": "CVE-2019-14310"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3). Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identified in the way of how the embedded device parsed the IPP packets. plural Ricoh SP C250DN A buffer error vulnerability exists in the device.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. RICOH SP C250DN is a printer from RICOH Corporation of Japan",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-14310"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014960"
},
{
"db": "CNVD",
"id": "CNVD-2020-19585"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-14310",
"trust": 3.0
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014960",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2020-19585",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202003-868",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19585"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014960"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-868"
},
{
"db": "NVD",
"id": "CVE-2019-14310"
}
]
},
"id": "VAR-202003-0927",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19585"
}
],
"trust": 1.1948718
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19585"
}
]
},
"last_update_date": "2024-11-23T21:36:02.773000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Support \u0026 Downloads",
"trust": 0.8,
"url": "https://www.ricoh-usa.com/en/support-and-download"
},
{
"title": "Patch for RICOH SP C250DN buffer error vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/211089"
},
{
"title": "RICOH SP C250DN Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=112088"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19585"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014960"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-868"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-787",
"trust": 1.0
},
{
"problemtype": "CWE-119",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014960"
},
{
"db": "NVD",
"id": "CVE-2019-14310"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.2,
"url": "https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-ricoh-printers/"
},
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14310"
},
{
"trust": 1.6,
"url": "https://www.ricoh-usa.com/en/support-and-download"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14310"
},
{
"trust": 0.8,
"url": "https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-ricoh-printers/#h"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19585"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014960"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-868"
},
{
"db": "NVD",
"id": "CVE-2019-14310"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2020-19585"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014960"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-868"
},
{
"db": "NVD",
"id": "CVE-2019-14310"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-03-26T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-19585"
},
{
"date": "2020-03-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014960"
},
{
"date": "2020-03-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-868"
},
{
"date": "2020-03-13T19:15:16.917000",
"db": "NVD",
"id": "CVE-2019-14310"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-03-26T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-19585"
},
{
"date": "2020-03-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014960"
},
{
"date": "2020-08-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-868"
},
{
"date": "2024-11-21T04:26:28.177000",
"db": "NVD",
"id": "CVE-2019-14310"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-868"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "RICOH SP C250DN buffer error vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19585"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-868"
}
],
"trust": 1.2
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-868"
}
],
"trust": 0.6
}
}
VAR-202003-0928
Vulnerability from variot - Updated: 2024-11-23 21:32Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh printers did not implement account lockout. Therefore, it was possible to obtain the local account credentials by brute force. plural Ricoh SP C250DN Devices contain vulnerabilities in insufficient protection of credentials.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. RICOH SP C250DN is a printer from RICOH Corporation of Japan.
There is a security vulnerability in Ricoh SP C250DN version 1.05, which originated from the device's failure to lock accounts
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202003-0928",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sp c250dn",
"scope": "eq",
"trust": 2.4,
"vendor": "ricoh",
"version": "1.05"
},
{
"model": "sp c250sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "*"
},
{
"model": "sp c252dn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "*"
},
{
"model": "sp c252sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "*"
},
{
"model": "sp c250sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252dn",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252sf",
"scope": null,
"trust": 0.8,
"vendor": "ricoh",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19586"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014957"
},
{
"db": "NVD",
"id": "CVE-2019-14299"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c250sf_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252dn_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:ricoh:sp_c252sf_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014957"
}
]
},
"cve": "CVE-2019-14299",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2019-14299",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 5.0,
"confidentialityImpact": "Partial",
"exploitabilityScore": null,
"id": "JVNDB-2019-014957",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2020-19586",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2019-14299",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "JVNDB-2019-014957",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2019-14299",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "JVNDB-2019-014957",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNVD",
"id": "CNVD-2020-19586",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-202003-867",
"trust": 0.6,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19586"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014957"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-867"
},
{
"db": "NVD",
"id": "CVE-2019-14299"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh printers did not implement account lockout. Therefore, it was possible to obtain the local account credentials by brute force. plural Ricoh SP C250DN Devices contain vulnerabilities in insufficient protection of credentials.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. RICOH SP C250DN is a printer from RICOH Corporation of Japan. \n\r\n\r\nThere is a security vulnerability in Ricoh SP C250DN version 1.05, which originated from the device\u0027s failure to lock accounts",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-14299"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014957"
},
{
"db": "CNVD",
"id": "CNVD-2020-19586"
}
],
"trust": 2.16
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2019-14299",
"trust": 3.0
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014957",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2020-19586",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2020.4167",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-202003-867",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19586"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014957"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-867"
},
{
"db": "NVD",
"id": "CVE-2019-14299"
}
]
},
"id": "VAR-202003-0928",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19586"
}
],
"trust": 1.1948718
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19586"
}
]
},
"last_update_date": "2024-11-23T21:32:11.205000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Support \u0026 Downloads",
"trust": 0.8,
"url": "https://www.ricoh-usa.com/en/support-and-download"
},
{
"title": "Patch for RICOH SP C250DN logic flaw vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/211087"
},
{
"title": "RICOH SP C250DN Security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=112087"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19586"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014957"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-867"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-307",
"trust": 1.0
},
{
"problemtype": "CWE-522",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014957"
},
{
"db": "NVD",
"id": "CVE-2019-14299"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.2,
"url": "https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-ricoh-printers/"
},
{
"trust": 2.0,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-14299"
},
{
"trust": 1.6,
"url": "https://www.ricoh-usa.com/en/support-and-download"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14299"
},
{
"trust": 0.8,
"url": "https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-ricoh-printers/#d"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/esb-2020.4167/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2020-19586"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014957"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-867"
},
{
"db": "NVD",
"id": "CVE-2019-14299"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2020-19586"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-014957"
},
{
"db": "CNNVD",
"id": "CNNVD-202003-867"
},
{
"db": "NVD",
"id": "CVE-2019-14299"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-03-26T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-19586"
},
{
"date": "2020-03-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014957"
},
{
"date": "2020-03-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-867"
},
{
"date": "2020-03-13T19:15:16.697000",
"db": "NVD",
"id": "CVE-2019-14299"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2020-03-26T00:00:00",
"db": "CNVD",
"id": "CNVD-2020-19586"
},
{
"date": "2020-03-31T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-014957"
},
{
"date": "2020-11-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202003-867"
},
{
"date": "2024-11-21T04:26:24.413000",
"db": "NVD",
"id": "CVE-2019-14299"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-867"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Ricoh SP C250DN Inadequate protection of credentials on devices",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-014957"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202003-867"
}
],
"trust": 0.6
}
}
VAR-202202-1057
Vulnerability from variot - Updated: 2024-08-14 14:11RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpa_supplicant.conf. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data. plural RICOH Printer SP series products contain an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202202-1057",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "sp 330sn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 320sfn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 325sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 212w",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 377snwx",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 221snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 377dnwx",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 310dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 220snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp c260sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c250dn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 330sfn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c261sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 221sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 277snwx",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 212sfw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 312sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "m 320f",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 330sn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "p 310",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 325dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "aficio sp 3500sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp c260dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c262dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 277sfnwx",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 311dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 221snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 325sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "p 311",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 220snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 221sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 212nw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 213suw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 277nwx",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 312dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 310sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 325snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "m c2000",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c250sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "m 2701",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c252dn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 212snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 220sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 325dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "m 2700",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 213w",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "m 320fb",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "m c250fwb",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 213sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 212suw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "m c250fw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c262sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 330dn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 377sfnwx",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "p c300w",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp c261dnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 325snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 311sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 3710sf",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 3710dn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 220sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 221sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 220nw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "p c301w",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 213snw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 221s",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 212sfnw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 213sfw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 221nw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "m 320",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 320sn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 213nw",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": null
},
{
"model": "sp 320dn",
"scope": "eq",
"trust": 1.0,
"vendor": "ricoh",
"version": "1.06"
},
{
"model": "sp 221s",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 330sn",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 325dnw",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 220snw",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 320sn",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 320dn",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "aficio sp 3500sf",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 325snw",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 325sfnw",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
},
{
"model": "sp 320sfn",
"scope": null,
"trust": 0.8,
"vendor": "\u30ea\u30b3\u30fc",
"version": null
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"cve": "CVE-2021-33945",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2021-33945",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2021-33945",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 9.8,
"baseSeverity": "Critical",
"confidentialityImpact": "High",
"exploitabilityScore": null,
"id": "CVE-2021-33945",
"impactScore": null,
"integrityImpact": "High",
"privilegesRequired": "None",
"scope": "Unchanged",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2021-33945",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2021-33945",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNNVD",
"id": "CNNVD-202202-1296",
"trust": 0.6,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"db": "CNNVD",
"id": "CNNVD-202202-1296"
},
{
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpa_supplicant.conf. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data. plural RICOH Printer SP series products contain an out-of-bounds write vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state",
"sources": [
{
"db": "NVD",
"id": "CVE-2021-33945"
},
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
}
],
"trust": 1.62
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2021-33945",
"trust": 3.2
},
{
"db": "JVNDB",
"id": "JVNDB-2021-018538",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-202202-1296",
"trust": 0.6
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"db": "CNNVD",
"id": "CNNVD-202202-1296"
},
{
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"id": "VAR-202202-1057",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VARIoT devices database",
"id": null
}
],
"trust": 0.5948718
},
"last_update_date": "2024-08-14T14:11:00.215000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Update",
"trust": 0.8,
"url": "https://www.ricoh.com/info/2022/0228_1"
},
{
"title": "wpa_supplicant Buffer error vulnerability fix",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=184142"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"db": "CNNVD",
"id": "CNNVD-202202-1296"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-787",
"trust": 1.0
},
{
"problemtype": "Out-of-bounds writing (CWE-787) [NVD evaluation ]",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.4,
"url": "https://github.com/ainevsia/cve-request/tree/main/ricoh/1"
},
{
"trust": 1.6,
"url": "https://www.ricoh.com/info/2022/0228_1/"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2021-33945"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"db": "CNNVD",
"id": "CNNVD-202202-1296"
},
{
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"db": "CNNVD",
"id": "CNNVD-202202-1296"
},
{
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-06-21T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"date": "2022-02-15T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202202-1296"
},
{
"date": "2022-02-15T20:15:07.407000",
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2023-06-21T03:28:00",
"db": "JVNDB",
"id": "JVNDB-2021-018538"
},
{
"date": "2022-03-10T00:00:00",
"db": "CNNVD",
"id": "CNNVD-202202-1296"
},
{
"date": "2022-05-11T14:24:49.947000",
"db": "NVD",
"id": "CVE-2021-33945"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202202-1296"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural \u00a0RICOH\u00a0Printer\u00a0SP\u00a0 series product out-of-bounds write vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2021-018538"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer error",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-202202-1296"
}
],
"trust": 0.6
}
}