PT-2019-13596 · Ricoh · Ricoh Sp C250Dn+1

Publicado 2019-08-26 · Atualizado 2019-09-13 · CVE-2019-14300

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ricoh SP C250DN firmware versions up to 1.06 Ricoh SP C250SF firmware versions up to 1.12

Description The issue affects several Ricoh printer models, where multiple buffer overflows occur when parsing HTTP cookie headers. This allows an attacker to cause a denial of service or achieve code execution via crafted requests to the web server.

Recommendations For Ricoh SP C250DN firmware version 1.06 and earlier, update the firmware to a version later than 1.06. For Ricoh SP C250SF firmware version 1.12 and earlier, update the firmware to a version later than 1.12.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2019-14300

Produtos afetados

Ricoh Sp C250Dn

Ricoh Sp C250Sf

Referências · 5

• http://jvn.jp/en/jp/JVN11708203/index.html · Nota
• https://ricoh.com/info/2019/0823_1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14300 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-14300 · Aviso do Fabricante
• https://ricoh-usa.com/en/support-and-download · Nota