Browse CVEs

CRITICAL 9.8 CVE-2021-33945 RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221… Sp 320dn Firmware No fix yet Fix from $2,3002022-02-15 CRITICAL 9.8 CVE-2019-14299 Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh printers did not implement account lockout. … Sp C250sf Firmware Mitigation only Fix from $2,3002020-03-13 CRITICAL 9.8 CVE-2019-14310 Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3). Unauthenticated crafted packets to the IPP service will cause a vulnerable devic… Sp C250sf Firmware Mitigation only Fix from $2,3002020-03-13 HIGH 7.5 CVE-2019-14303 Ricoh SP C250DN 1.05 devices allow denial of service (issue 1 of 3). Some Ricoh printers were affected by a wrong LPD service implementation that lea… Sp C250sf Firmware No fix yet Fix from $1,9502020-03-13 HIGH 7.5 CVE-2019-14309 Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow t… Sp C250sf Firmware Mitigation only Fix from $1,9502020-03-13 MEDIUM 6.1 CVE-2019-6021 Open redirect vulnerability in Library Information Management System LIMEDIO all versions allows remote attackers to redirect users to arbitrary web … Limedio Mitigation only Fix from $1,6002019-12-26 MEDIUM 6.1 CVE-2019-18203 On the RICOH MP 501 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn a… Mp 501 Firmware No fix yet Fix from $1,6002019-10-21 MEDIUM 6.1 CVE-2019-11844 An HTML Injection vulnerability has been discovered on the RICOH SP 4520DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn or entryDi… Sp 4520dn Firmware No fix yet Fix from $1,6002019-05-14 MEDIUM 6.1 CVE-2019-11845 An HTML Injection vulnerability has been discovered on the RICOH SP 4510DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter. Sp 4510dn Firmware No fix yet Fix from $1,6002019-05-14 CRITICAL 9.8 CVE-2018-18006EPSS 21% Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myPrint WSDL… Myprint No fix yet Fix from $2,3002018-12-14 MEDIUM 6.1 CVE-2018-17315 On the RICOH MP C2003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn… Mp C2003sp Firmware No fix yet Fix from $1,6002018-09-26 MEDIUM 6.1 CVE-2018-17316 On the RICOH MP C6003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn… Mp C6003 Firmware No fix yet Fix from $1,6002018-09-26 MEDIUM 6.1 CVE-2018-17309 On the RICOH MP C406Z printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn… Mp C406zspf Firmware No fix yet Fix from $1,6002018-09-26 MEDIUM 6.1 CVE-2018-17310 On the RICOH MP C1803 JPN printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNa… Mp C1803 Jpn Firmware No fix yet Fix from $1,6002018-09-26 MEDIUM 6.1 CVE-2018-17311 On the RICOH MP C6503 Plus printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryN… Mp C6503 Firmware No fix yet Fix from $1,6002018-09-26 MEDIUM 6.1 CVE-2018-17312 On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryN… Aficio Mp 301spf Firmware No fix yet Fix from $1,6002018-09-26 MEDIUM 6.1 CVE-2018-17313 On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn … Mp C307 Firmware No fix yet Fix from $1,6002018-09-26 MEDIUM 6.1 CVE-2018-17314 On the RICOH Aficio MP 305+ printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entry… Mp 305\+ Firmware No fix yet Fix from $1,6002018-09-26 MEDIUM 6.1 CVE-2018-17001 On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameI… Sp 4510sf Firmware No fix yet Fix from $1,6002018-09-21 MEDIUM 6.1 CVE-2018-17002 On the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn … Mp 2001sp Firmware No fix yet Fix from $1,6002018-09-21 HIGH 8.8 CVE-2018-15884 RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter. Mp C4504ex Firmware No fix yet Fix from $1,9502018-08-28 MEDIUM 6.8 CVE-2012-5002EPSS 31% Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allow… Dl 10 No fix yet Fix from $1,6002012-09-19