Vulnerability Name:

CVE-2019-14307 (CCN-165915)

Assigned:2019-08-23
Published:2019-08-23
Updated:2019-09-13
Summary:Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*.
CVSS v3 Severity:9.8 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
8.5 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
9.8 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
8.5 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-119
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2019-14307

Source: CCN
Type: JVN#11708203
Multiple buffer overflow vulnerabilities in multiple Ricoh printers and Multifunction Printers (MFPs)

Source: JVN
Type: UNKNOWN
JVN#11708203

Source: XF
Type: UNKNOWN
ricoh-cve201914307-bo(165915)

Source: MISC
Type: Product
https://www.ricoh-usa.com/en/support-and-download

Source: CCN
Type: Ricoh Web site
Potential security vulnerabilities in some of Ricohs printers and Multifunction Printers (MFPs)

Source: MISC
Type: Vendor Advisory
https://www.ricoh.com/info/2019/0823_1/

Vulnerable Configuration:Configuration 1:
  • cpe:/o:ricoh:sp_c250sf_firmware:*:*:*:*:*:*:*:* (Version < 1.13)
  • AND
  • cpe:/h:ricoh:sp_c250sf:-:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:ricoh:sp_c252sf_firmware:*:*:*:*:*:*:*:* (Version < 1.13)
  • AND
  • cpe:/h:ricoh:sp_c252sf:-:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/o:ricoh:sp_c250dn_firmware:*:*:*:*:*:*:*:* (Version < 1.07)
  • AND
  • cpe:/h:ricoh:sp_c250dn:-:*:*:*:*:*:*:*

    • Configuration 4:
  • cpe:/o:ricoh:sp_c252dn_firmware:*:*:*:*:*:*:*:* (Version < 1.07)
  • AND
  • cpe:/h:ricoh:sp_c252dn:-:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/h:ricoh:sp_c250sf:-:*:*:*:*:*:*:*
  • OR cpe:/h:ricoh:sp_c252sf:-:*:*:*:*:*:*:*
  • OR cpe:/h:ricoh:sp_c250dn:-:*:*:*:*:*:*:*
  • OR cpe:/h:ricoh:sp_c252dn:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    ricoh sp c250sf firmware *
    ricoh sp c250sf -
    ricoh sp c252sf firmware *
    ricoh sp c252sf -
    ricoh sp c250dn firmware *
    ricoh sp c250dn -
    ricoh sp c252dn firmware *
    ricoh sp c252dn -
    ricoh sp c250sf -
    ricoh sp c252sf -
    ricoh sp c250dn -
    ricoh sp c252dn -