CVE Feed

    Dashboard / CVE / CVE-2018-16187

    CVE-2018-16187

    The RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.3 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) does not verify its server certificates, which allows man-in-the-middle attackers to eversdrop on encrypted communication.

    Published:Jan 9, 2019
    Last Modified:Nov 21, 2024
    EPS:Jan 9, 2019
    EPSS Score:0.00126
    CVSS Score:5.9

    Affected Products

    Vendor
    Ricoh
    Product
    D2200
    Vendor
    Ricoh
    Product
    D2200 Firmware
    Vendor
    Ricoh
    Product
    D5500
    Vendor
    Ricoh
    Product
    D5500 Firmware
    Vendor
    Ricoh
    Product
    D5510
    Vendor
    Ricoh
    Product
    D5510 Firmware
    Vendor
    Ricoh
    Product
    D5520
    Vendor
    Ricoh
    Product
    D5520 Firmware
    Vendor
    Ricoh
    Product
    D6500
    Vendor
    Ricoh
    Product
    D6500 Firmware
    Vendor
    Ricoh
    Product
    D6510
    Vendor
    Ricoh
    Product
    D6510 Firmware
    Vendor
    Ricoh
    Product
    D7500
    Vendor
    Ricoh
    Product
    D7500 Firmware
    Vendor
    Ricoh
    Product
    D8400
    Vendor
    Ricoh
    Product
    D8400 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-295 Improper Certificate Validation

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High