Ricoh vulnerabilities
51 vulnerabilities
Known vulnerabilities in Ricoh products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 208 products.
Products
50 of 208- Sp C250Dn13 vulnerabilities
- Sp C252Sf10 vulnerabilities
- Sp C250Sf9 vulnerabilities
- Sp C252Dn9 vulnerabilities
- M 3407 vulnerabilities
- M 340W7 vulnerabilities
- P 201W7 vulnerabilities
- SP 230Dnw7 vulnerabilities
- SP 230Sfnw7 vulnerabilities
- Sp 330Dn6 vulnerabilities
- D22005 vulnerabilities
- D55005 vulnerabilities
- D55105 vulnerabilities
- D55205 vulnerabilities
- D65005 vulnerabilities
- D65105 vulnerabilities
- D75005 vulnerabilities
- D84005 vulnerabilities
- M 27005 vulnerabilities
- M 27015 vulnerabilities
- Sp 212Nw5 vulnerabilities
- Sp 212Sfnw5 vulnerabilities
- Sp 212Sfw5 vulnerabilities
- Sp 212Snw5 vulnerabilities
- Sp 212Suw5 vulnerabilities
- Sp 212W5 vulnerabilities
- Sp 213Nw5 vulnerabilities
- Sp 213Sfnw5 vulnerabilities
- Sp 213Sfw5 vulnerabilities
- Sp 213Snw5 vulnerabilities
- Sp 213Suw5 vulnerabilities
- Sp 213W5 vulnerabilities
- Sp 220Nw5 vulnerabilities
- Sp 220Sfnw5 vulnerabilities
- Sp 220Snw5 vulnerabilities
- Sp 2215 vulnerabilities
- Sp 221Nw5 vulnerabilities
- Sp 221S5 vulnerabilities
- Sp 221Sf5 vulnerabilities
- Sp 221Sfnw5 vulnerabilities
- Sp 221Snw5 vulnerabilities
- Sp 277Sfnwx5 vulnerabilities
- Sp 277Snwx5 vulnerabilities
- Sp 330Sfn5 vulnerabilities
- Sp 330Sn5 vulnerabilities
- Sp 3710Dn5 vulnerabilities
- Sp 3710Sf5 vulnerabilities
- Sp C260Dnw5 vulnerabilities
- Sp C260Sfnw5 vulnerabilities
- Sp C261Dnw5 vulnerabilities
CVE-2018-16187ricoh company, ltd.ricoh interactive whiteboard+8
EPSS score0.50%
The RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.3 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) does not verify its server certificates, which allows man-in-the-middle attackers to eversdrop on encrypted communication.CVE-2018-16186ricoh company, ltd.ricoh interactive whiteboard+8EPSS score0.60%
RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.1 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) uses hard-coded credentials, which may allow an attacker on the same network segments to login to the administrators settings screen and change the configuration.CVE-2018-16188ricoh company, ltd.ricoh interactive whiteboard+8EPSS score1.87%
SQL injection vulnerability in the RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.3 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2018-16184ricoh company, ltd.ricoh interactive whiteboard+8EPSS score4.32%
RICOH Interactive Whiteboard D2200 V1.6 to V2.2, D5500 V1.6 to V2.2, D5510 V1.6 to V2.2, and the display versions with RICOH Interactive Whiteboard Controller Type1 V1.6 to V2.2 attached (D5520, D6500, D6510, D7500, D8400) allows remote attackers to execute arbitrary commands via unspecified vectors.CVE-2018-16185ricoh company, ltd.ricoh interactive whiteboard+8EPSS score0.98%
RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.1 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) allows remote attackers to execute a malicious program.CVE-2018-17002ricohmp_2001sp_firmwareEPSS score1.00%
On the RICOH MP 2001 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.CVE-2018-17314ricohmp_305\+_firmwareEPSS score1.00%
On the RICOH Aficio MP 305+ printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.CVE-2018-17001ricohsp_4510sf_firmwareEPSS score1.00%
On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.CVE-2018-17313ricohmp_c307_firmwareEPSS score2.32%
On the RICOH MP C307 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.CVE-2018-17310ricohmp_c1803_jpn_firmwareEPSS score2.32%
On the RICOH MP C1803 JPN printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.CVE-2018-17315ricohmp_c2003sp_firmwareEPSS score1.00%
On the RICOH MP C2003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.CVE-2018-17316ricohmp_c6003_firmwareEPSS score1.00%
On the RICOH MP C6003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.CVE-2018-17309ricohmp_c406zspf_firmwareEPSS score1.00%
On the RICOH MP C406Z printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.CVE-2018-17311ricohmp_c6503_firmwareEPSS score1.00%
On the RICOH MP C6503 Plus printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.CVE-2018-17312ricohaficio_mp_301spf_firmwareEPSS score1.00%
On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.CVE-2018-18006ricohmyprintEPSS score21.49%
Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myPrint WSDL API, as demonstrated by discovering API secrets of related Google cloud printers, encrypted passwords of mail servers, and names of printed files.CVE-2018-15884ricohmp_c4504ex_firmwareEPSS score2.50%
RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter.CVE-2021-33945ricohaficio_sp_3500sf_firmware+65EPSS score1.85%
RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpa_supplicant.conf. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.CVE-2015-6750ricohdl-1_sr10EPSS score7.67%
Buffer overflow in Ricoh DL FTP Server 1.1.0.6 and earlier allows remote attackers to execute arbitrary code via a long USER command.CVE-2022-36403ricoh company, ltd.installer of device software manager+1EPSS score0.22%
Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.