PT-2019-9250 · Ricoh · Ricoh Interactive Whiteboard D5520+8

Publicado 2019-01-09 · Atualizado 2019-10-03 · CVE-2018-16184

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RICOH Interactive Whiteboard D2200 versions 1.6 through 2.2 RICOH Interactive Whiteboard D5500 versions 1.6 through 2.2 RICOH Interactive Whiteboard D5510 versions 1.6 through 2.2 RICOH Interactive Whiteboard D5520 versions 1.6 through 2.2 RICOH Interactive Whiteboard D6500 versions 1.6 through 2.2 RICOH Interactive Whiteboard D6510 versions 1.6 through 2.2 RICOH Interactive Whiteboard D7500 versions 1.6 through 2.2 RICOH Interactive Whiteboard D8400 versions 1.6 through 2.2 RICOH Interactive Whiteboard Controller Type1 versions 1.6 through 2.2

Description The issue allows remote attackers to execute arbitrary commands via unspecified vectors.

Recommendations For RICOH Interactive Whiteboard D2200 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard D5500 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard D5510 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard D5520 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard D6500 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard D6510 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard D7500 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard D8400 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard Controller Type1 versions 1.6 through 2.2, update to a version outside of the affected range.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2018-16184

Produtos afetados

Ricoh Interactive Whiteboard Controller Type1

Ricoh Interactive Whiteboard D2200

Ricoh Interactive Whiteboard D5500

Ricoh Interactive Whiteboard D5510

Ricoh Interactive Whiteboard D5520

Ricoh Interactive Whiteboard D6500

Ricoh Interactive Whiteboard D6510

Ricoh Interactive Whiteboard D7500

Ricoh Interactive Whiteboard D8400

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-16184 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-16184 · Nota de Segurança
• https://jvn.jp/en/jp/JVN55263945/index.html · Nota
• https://ricoh.com/info/2018/1127_1.html · Aviso do Fabricante