Skip to content
Noroxi

RICOH records

46 published records for vendor ricoh.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 4.3%
Pre-auth RCE
6
With a fix record
2.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 22
  5. 23
  6. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

46 records
  • CVE-2018-18006
    45Plan

    Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myP

    CriticalCVSS 9.8No exploitEPSS 21%

    ricoh · myprintDec 14, 2018

  • CVE-2012-5002
    40Plan

    Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabl

    MediumCVSS 6.8WeaponizedEPSS 31%

    ricoh · dl-10Sep 19, 2012

  • CVE-2019-19363
    40Plan

    An issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to 2020 that allows attackers local privilege es

    HighCVSS 7.8WeaponizedEPSS 4%

    ricoh · generic pcl5 driverJan 24, 2020

  • CVE-2018-16184
    40Plan

    RICOH Interactive Whiteboard D2200 V1.6 to V2.2, D5500 V1.6 to V2.2, D5510 V1.6 to V2.2, and the display versions with RICOH Interactive Whi

    CriticalCVSS 9.8No exploitEPSS 4%

    ricoh · d2200 firmwareJan 9, 2019

  • CVE-2019-14308
    40Plan

    Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code exec

    CriticalCVSS 9.8No exploitEPSS 3%

    ricoh · sp c250sf firmwareAug 26, 2019

  • CVE-2019-14300
    40Plan

    Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or c

    CriticalCVSS 9.8No exploitEPSS 3%

    ricoh · sp c250sf firmwareAug 26, 2019

  • CVE-2019-14307
    40Plan

    Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of

    CriticalCVSS 9.8No exploitEPSS 3%

    ricoh · sp c250sf firmwareAug 26, 2019

  • CVE-2019-14305
    40Plan

    Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, SMTP, and notification alerts,

    CriticalCVSS 9.8No exploitEPSS 3%

    ricoh · sp c250sf firmwareAug 26, 2019

  • CVE-2019-14310
    40Plan

    Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3).

    CriticalCVSS 9.8No exploitEPSS 1%

    ricoh · sp c250sf firmwareMar 13, 2020

  • CVE-2018-16188
    40Plan

    SQL injection vulnerability in the RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display vers

    CriticalCVSS 9.8No exploitEPSS 1%

    ricoh · d2200 firmwareJan 9, 2019

  • CVE-2021-33945
    40Plan

    RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SN

    CriticalCVSS 9.8No exploitEPSS 1%

    ricoh · sp 320dn firmwareFeb 15, 2022

  • CVE-2019-14299
    39Monitor

    Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks.

    CriticalCVSS 9.8No exploitEPSS 1%

    ricoh · sp c250sf firmwareMar 13, 2020

  • CVE-2024-37124
    39Monitor

    Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client.

    CriticalCVSS 9.8No exploitEPSS 0%

    ricoh company, ltd. · ricoh streamline nx pc clientJun 19, 2024

  • CVE-2024-36480
    39Monitor

    Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier.

    CriticalCVSS 9.8No exploitEPSS 0%

    cve-2024-36480 · ricoh streamline nx pc clientJun 19, 2024

  • CVE-2018-15884
    36Monitor

    RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter.

    HighCVSS 8.8Proof of conceptEPSS 2%

    ricoh · mp c4504ex firmwareAug 28, 2018

  • CVE-2022-43969
    36Monitor

    Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.

    CriticalCVSS 9.1No exploitEPSS 0%

    ricoh · mp c307 firmwareFeb 16, 2023

  • CVE-2019-14304
    35Monitor

    Ricoh SP C250DN 1.06 devices allow CSRF.

    HighCVSS 8.8No exploitEPSS 0%

    ricoh · sp c250sf firmwareJan 10, 2020

  • CVE-2018-16186
    35Monitor

    RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whitebo

    HighCVSS 8.8No exploitEPSS 0%

    ricoh · d2200 firmwareJan 9, 2019

  • CVE-2019-7751
    34Monitor

    A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, formerly PTI Marketing,

    HighCVSS 7.5Proof of conceptEPSS 14%

    ricoh · fusionpro vdpDec 31, 2019

  • CVE-2015-6750
    32Monitor

    Buffer overflow in Ricoh DL FTP Server 1.1.0.6 and earlier allows remote attackers to execute arbitrary code via a long USER command.

    HighCVSS 7.5Proof of conceptEPSS 7%

    ricoh · dl-1 sr10Aug 31, 2015

  • CVE-2024-39927
    32Monitor

    Out-of-bounds write vulnerability exists in Ricoh MFPs and printers.

    HighCVSS 8.2No exploitEPSS 0%

    ricoh company, ltd. · im c3510/c3010Jul 10, 2024

  • CVE-2018-16185
    31Monitor

    RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whitebo

    HighCVSS 7.8No exploitEPSS 0%

    ricoh · d2200 firmwareJan 9, 2019

  • CVE-2019-20001
    31Monitor

    An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to escalate local privile

    HighCVSS 7.8No exploitEPSS 0%

    ricoh · streamline nx client toolAug 4, 2020

  • CVE-2022-36403
    31Monitor

    Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges

    HighCVSS 7.8No exploitEPSS 0%

    ricoh · device software managerSep 8, 2022

  • CVE-2023-30759
    31Monitor

    The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modification and may spawn an u

    HighCVSS 7.8No exploitEPSS 0%

    ricoh · printer driver packager nxJun 19, 2023