CVE-2019-14299: Critical severity ricoh sp c250sf vulnerability
Published Mar 13, 2020
·Updated
Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh printers did not implement account lockout. Therefore, it was possible to obtain the local account credentials by brute force.
Affected Software
8 affected components
Ricoh Sp C250sf Firmware
Ricoh Sp C250sf
Ricoh Sp C252sf Firmware
Ricoh Sp C252sf
Ricoh Sp C250dn Firmware=1.05
Ricoh SP C250DN
Ricoh Sp C252dn Firmware
Ricoh Sp C252dn
Event History
Mar 13, 2020
CVE Published
via MITRE·06:50 PM
Data Sourced
via MITRE·06:50 PM
Description
Frequently Asked Questions
1
What is CVE-2019-14299?
CVE-2019-14299 is a vulnerability found in Ricoh SP C250DN 1.05 devices that have an authentication method vulnerable to brute force attacks.
2
How can this vulnerability be exploited?
This vulnerability can be exploited by carrying out brute force attacks to obtain local account credentials.
3
What is the severity of CVE-2019-14299?
CVE-2019-14299 has a severity rating of 9.8 (Critical).
4
What software versions are affected by CVE-2019-14299?
Ricoh SP C250DN 1.05 firmware is affected by CVE-2019-14299.
5
Is there a fix available for CVE-2019-14299?
It is recommended to update the firmware of the affected Ricoh SP C250DN devices to a version that addresses this vulnerability.