PT-2020-10148 · Ricoh · Pc Fax Generic Driver+8

Alexander Pudwill + 2 · Published 2020-01-22 · Updated 2023-02-10 · CVE-2019-19363

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ricoh Windows printer drivers (affected versions not specified) PCL6 Driver for Universal Print versions prior to 4.0 PS Driver for Universal Print versions prior to 4.0 PC FAX Generic Driver versions prior to 2020 Generic PCL5 Driver versions prior to 2020 RPCS Driver versions prior to 2020 PostScript3 Driver versions prior to 2020 PCL6 (PCL XL) Driver versions prior to 2020 RPCS Raster Driver versions prior to 2020

Description An issue was discovered in Ricoh Windows printer drivers that allows attackers local privilege escalation.

Recommendations For PCL6 Driver for Universal Print versions prior to 4.0, update to version 4.0 or later. For PS Driver for Universal Print versions prior to 4.0, update to version 4.0 or later. For PC FAX Generic Driver versions prior to 2020, update to a version released in 2020 or later. For Generic PCL5 Driver versions prior to 2020, update to a version released in 2020 or later. For RPCS Driver versions prior to 2020, update to a version released in 2020 or later. For PostScript3 Driver versions prior to 2020, update to a version released in 2020 or later. For PCL6 (PCL XL) Driver versions prior to 2020, update to a version released in 2020 or later. For RPCS Raster Driver versions prior to 2020, update to a version released in 2020 or later.

Exploit

Fix

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2019-19363

Affected Products

Generic Pcl5 Driver

Pc Fax Generic Driver

Pcl6 (Pcl Xl) Driver

Pcl6 Driver For Universal Print

Ps Driver For Universal Print

Postscript3 Driver

Rpcs Driver

Rpcs Raster Driver

Ricoh Windows Printer Drivers

References · 17

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/ricoh_driver_privesc.rb · Exploit
• 🔥 https://exploit-db.com/exploits/47962 · Exploit
• 🔥 http://packetstormsecurity.com/files/156251/Ricoh-Driver-Privilege-Escalation.html · Exploit
• 🔥 https://exploit-db.com/exploits/48036 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-19363 · Security Note
• https://ricoh.com/info/2020/0122_1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-19363 · Vendor Advisory
• https://t.me/malwr/1980 · Telegram Post
• https://t.me/malwr/2264 · Telegram Post
• https://t.me/rnetsec/11367 · Telegram Post
• https://t.me/defcon_news/36306 · Telegram Post
• https://t.me/defcon_news/36555 · Telegram Post
• http://jvn.jp/en/jp/JVN15697526/index.html · Note
• http://seclists.org/fulldisclosure/2020/Jan/34 · Note
• http://packetstormsecurity.com/files/156082/Ricoh-Printer-Driver-Local-Privilege-Escalation.html · Note