PT-2019-9250 · Ricoh · Ricoh Interactive Whiteboard D5520+8

Published 2019-01-09 · Updated 2019-10-03 · CVE-2018-16184

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RICOH Interactive Whiteboard D2200 versions 1.6 through 2.2 RICOH Interactive Whiteboard D5500 versions 1.6 through 2.2 RICOH Interactive Whiteboard D5510 versions 1.6 through 2.2 RICOH Interactive Whiteboard D5520 versions 1.6 through 2.2 RICOH Interactive Whiteboard D6500 versions 1.6 through 2.2 RICOH Interactive Whiteboard D6510 versions 1.6 through 2.2 RICOH Interactive Whiteboard D7500 versions 1.6 through 2.2 RICOH Interactive Whiteboard D8400 versions 1.6 through 2.2 RICOH Interactive Whiteboard Controller Type1 versions 1.6 through 2.2

Description The issue allows remote attackers to execute arbitrary commands via unspecified vectors.

Recommendations For RICOH Interactive Whiteboard D2200 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard D5500 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard D5510 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard D5520 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard D6500 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard D6510 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard D7500 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard D8400 versions 1.6 through 2.2, update to a version outside of the affected range. For RICOH Interactive Whiteboard Controller Type1 versions 1.6 through 2.2, update to a version outside of the affected range.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2018-16184

Affected Products

Ricoh Interactive Whiteboard Controller Type1

Ricoh Interactive Whiteboard D2200

Ricoh Interactive Whiteboard D5500

Ricoh Interactive Whiteboard D5510

Ricoh Interactive Whiteboard D5520

Ricoh Interactive Whiteboard D6500

Ricoh Interactive Whiteboard D6510

Ricoh Interactive Whiteboard D7500

Ricoh Interactive Whiteboard D8400

References · 4

• https://osv.dev/vulnerability/CVE-2018-16184 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-16184 · Security Note
• https://ricoh.com/info/2018/1127_1.html · Vendor Advisory
• https://jvn.jp/en/jp/JVN55263945/index.html · Note