CVE-2019-14300: Buffer Overflow
Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:spc250dnfirmware:-::::::: up to (including) 1.06 running on cpe:2.3:o:ricoh:spc250dn:-:::::::, cpe:2.3:o:ricoh:spc252dn:-:::::::. Another affected configuration is cpe:2.3:o:ricoh:spc250sffirmware:-::::::: up to (including) 1.12 running on cpe:2.3:o:ricoh:spc250sf:-:::::::, cpe:2.3:o:ricoh:spc252sf:-:::::::.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Ricoh printer vulnerability?
The vulnerability ID for this Ricoh printer vulnerability is CVE-2019-14300.
What is the severity of CVE-2019-14300?
The severity of CVE-2019-14300 is critical with a CVSS score of 9.8.
How can the vulnerability CVE-2019-14300 be exploited?
The vulnerability CVE-2019-14300 can be exploited by sending crafted requests with malicious HTTP cookie headers to the affected Ricoh printer's web server.
Which firmware versions are affected by CVE-2019-14300?
The firmware versions affected by CVE-2019-14300 depend on the specific Ricoh printer model. For example, Ricoh Sp C250sf Firmware up to version 1.13 and Ricoh Sp C252sf Firmware up to version 1.13 are affected.
Where can I find more information about this vulnerability and updates from Ricoh?
You can find more information about this vulnerability and updates from Ricoh at the following URLs: [http://jvn.jp/en/jp/JVN11708203/index.html](http://jvn.jp/en/jp/JVN11708203/index.html), [https://www.ricoh-usa.com/en/support-and-download](https://www.ricoh-usa.com/en/support-and-download), [https://www.ricoh.com/info/2019/0823_1/](https://www.ricoh.com/info/2019/0823_1/)