PT-2019-13599 · Ricoh · Ricoh Sp C250Dn+1

Publicado 2019-08-26 · Atualizado 2019-09-13 · CVE-2019-14308

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ricoh SP C250DN firmware versions up to 1.06 Ricoh SP C250SF firmware versions up to 1.12

Description The issue affects several Ricoh printer models, including the SP C250DN and SP C250SF, due to buffer overflows when parsing LPD packets. This can lead to a denial of service or code execution if an attacker sends crafted requests to the LPD service.

Recommendations For Ricoh SP C250DN firmware versions up to 1.06, update the firmware to a version later than 1.06. For Ricoh SP C250SF firmware versions up to 1.12, update the firmware to a version later than 1.12. As a temporary workaround, consider restricting access to the LPD service until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2019-14308

Produtos afetados

Ricoh Sp C250Dn

Ricoh Sp C250Sf

Referências · 5

• https://osv.dev/vulnerability/CVE-2019-14308 · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN11708203/index.html · Nota
• https://ricoh.com/info/2019/0823_1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14308 · Nota de Segurança
• https://ricoh-usa.com/en/support-and-download · Nota