CVE Feed

    Dashboard / CVE / CVE-2019-14309

    CVE-2019-14309

    Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders.

    Published:Mar 13, 2020
    Last Modified:Nov 21, 2024
    EPS:Mar 13, 2020
    EPSS Score:0.00344
    CVSS Score:7.5

    Affected Products

    Vendor
    Ricoh
    Product
    Sp C250dn
    Vendor
    Ricoh
    Product
    Sp C250dn Firmware
    Vendor
    Ricoh
    Product
    Sp C250sf
    Vendor
    Ricoh
    Product
    Sp C250sf Firmware
    Vendor
    Ricoh
    Product
    Sp C252dn
    Vendor
    Ricoh
    Product
    Sp C252dn Firmware
    Vendor
    Ricoh
    Product
    Sp C252sf
    Vendor
    Ricoh
    Product
    Sp C252sf Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-798 Use of Hard-coded Credentials

    Related CVEs

    CVE-2021-33945 (CVSS 9.8) — RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Afici…
    CVE-2019-14299 (CVSS 9.8) — Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh print…
    CVE-2019-14303 (CVSS 7.5) — Ricoh SP C250DN 1.05 devices allow denial of service (issue 1 of 3). Some Ricoh printers were affected by a wr…
    CVE-2019-14310 (CVSS 9.8) — Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3). Unauthenticated crafted packets to the IP…
    CVE-2019-14301 (CVSS 7.5) — Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2).…
    CVE-2019-14302 (CVSS 6.8) — On Ricoh SP C250DN 1.06 devices, a debug port can be used.…
    CVE-2019-14306 (CVSS 7.5) — Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).…
    CVE-2019-14304 (CVSS 8.8) — Ricoh SP C250DN 1.06 devices allow CSRF.…
    CVE-2019-14300 (CVSS 9.8) — Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to …
    CVE-2019-14305 (CVSS 8.8) — Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, S…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High