PT-2023-14411 · Ricoh · Ricoh Mp C4504Ex

Published 2023-02-16 · Updated 2025-03-19 · CVE-2022-43969

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Ricoh mp c4504ex version 1.06

Description The issue concerns the mishandling of credentials in Ricoh mp c4504ex devices.

Recommendations For version 1.06, update the firmware to a version that properly handles credentials. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2022-43969

Affected Products

Ricoh Mp C4504Ex

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-43969 · Security Note
• https://osv.dev/vulnerability/CVE-2022-43969 · Vendor Advisory
• https://ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2022-000002 · Vendor Advisory
• https://t.me/cibsecurity/58310 · Telegram Post
• https://t.me/cvenotify/44461 · Telegram Post
• https://ricoh.com/software/dev_soft_manager · Note
• https://t.me/cvenotify/115332 · Telegram Post