CVE Feed

    Dashboard / CVE / CVE-2019-14310

    CVE-2019-14310

    Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3). Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identified in the way of how the embedded device parsed the IPP packets

    Published:Mar 13, 2020
    Last Modified:Nov 21, 2024
    EPS:Mar 13, 2020
    EPSS Score:0.00521
    CVSS Score:9.8

    Affected Products

    Vendor
    Ricoh
    Product
    Sp C250dn
    Vendor
    Ricoh
    Product
    Sp C250dn Firmware
    Vendor
    Ricoh
    Product
    Sp C250sf
    Vendor
    Ricoh
    Product
    Sp C250sf Firmware
    Vendor
    Ricoh
    Product
    Sp C252dn
    Vendor
    Ricoh
    Product
    Sp C252dn Firmware
    Vendor
    Ricoh
    Product
    Sp C252sf
    Vendor
    Ricoh
    Product
    Sp C252sf Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2021-33945 (CVSS 9.8) — RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Afici…
    CVE-2019-14299 (CVSS 9.8) — Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh print…
    CVE-2019-14303 (CVSS 7.5) — Ricoh SP C250DN 1.05 devices allow denial of service (issue 1 of 3). Some Ricoh printers were affected by a wr…
    CVE-2019-14309 (CVSS 7.5) — Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within t…
    CVE-2019-14301 (CVSS 7.5) — Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2).…
    CVE-2019-14302 (CVSS 6.8) — On Ricoh SP C250DN 1.06 devices, a debug port can be used.…
    CVE-2019-14306 (CVSS 7.5) — Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).…
    CVE-2019-14304 (CVSS 8.8) — Ricoh SP C250DN 1.06 devices allow CSRF.…
    CVE-2019-14300 (CVSS 9.8) — Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to …
    CVE-2019-14305 (CVSS 8.8) — Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, S…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High