CVE Feed

    Dashboard / CVE / CVE-2019-14299

    CVE-2019-14299

    Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh printers did not implement account lockout. Therefore, it was possible to obtain the local account credentials by brute force.

    Published:Mar 13, 2020
    Last Modified:Nov 21, 2024
    EPS:Mar 13, 2020
    EPSS Score:0.00371
    CVSS Score:9.8

    Affected Products

    Vendor
    Ricoh
    Product
    Sp C250dn
    Vendor
    Ricoh
    Product
    Sp C250dn Firmware
    Vendor
    Ricoh
    Product
    Sp C250sf
    Vendor
    Ricoh
    Product
    Sp C250sf Firmware
    Vendor
    Ricoh
    Product
    Sp C252dn
    Vendor
    Ricoh
    Product
    Sp C252dn Firmware
    Vendor
    Ricoh
    Product
    Sp C252sf
    Vendor
    Ricoh
    Product
    Sp C252sf Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2021-33945 (CVSS 9.8) — RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Afici…
    CVE-2019-14303 (CVSS 7.5) — Ricoh SP C250DN 1.05 devices allow denial of service (issue 1 of 3). Some Ricoh printers were affected by a wr…
    CVE-2019-14309 (CVSS 7.5) — Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within t…
    CVE-2019-14310 (CVSS 9.8) — Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3). Unauthenticated crafted packets to the IP…
    CVE-2019-14301 (CVSS 7.5) — Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2).…
    CVE-2019-14302 (CVSS 6.8) — On Ricoh SP C250DN 1.06 devices, a debug port can be used.…
    CVE-2019-14306 (CVSS 7.5) — Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).…
    CVE-2019-14304 (CVSS 8.8) — Ricoh SP C250DN 1.06 devices allow CSRF.…
    CVE-2019-14300 (CVSS 9.8) — Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to …
    CVE-2019-14305 (CVSS 8.8) — Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, S…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High