CveMateVulnerability intelligence

Ricoh Company, Ltd. vulnerabilities

31 vulnerabilities

Known vulnerabilities in Ricoh Company, Ltd. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 23 products.

Products

23

Ricoh Interactive Whiteboard5 vulnerabilities
Multiple Laser Printers And Mfps Which Implement Web Image Monitor3 vulnerabilities
Ricoh Streamline NX3 vulnerabilities
Ricoh Streamline NX PC Client3 vulnerabilities
Ricoh Streamline NX V3 PC Client3 vulnerabilities
Multiple Printers And Scanners2 vulnerabilities
ジョブログ集計/分析ソフトウェア Ricohジョブログ集計ツール1 vulnerabilities
Aficio SP 4210N1 vulnerabilities
IM 460F/460Ftl/370/370F1 vulnerabilities
IM C2510/C20101 vulnerabilities
IM C3510/C30101 vulnerabilities
IM C6010/C5510/C45101 vulnerabilities
IM C70101 vulnerabilities
IM C8500/C8510M/C8500/C8500M1 vulnerabilities
Installer Of Device Software Manager1 vulnerabilities
Javatm Platform1 vulnerabilities
Library Information Management System Limedio1 vulnerabilities
Multiple Driver Installers For Windows1 vulnerabilities
Multiple Laser Printers And Mfps Which Implement Ricoh Web Image Monitor1 vulnerabilities
Multiple Mfps1 vulnerabilities
Multiple Printer Drivers1 vulnerabilities
Printer Driver Packager NX1 vulnerabilities
See "References" Section1 vulnerabilities

CVE-2018-16187ricoh company, ltd.ricoh interactive whiteboard+87y ago09-01-2019 22:00

The RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.3 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) does not verify its server certificates, which allows man-in-the-middle attackers to eversdrop on encrypted communication.CVE-2018-16186ricoh company, ltd.ricoh interactive whiteboard+87y ago09-01-2019 22:00

RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.1 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) uses hard-coded credentials, which may allow an attacker on the same network segments to login to the administrators settings screen and change the configuration.CVE-2018-16188ricoh company, ltd.ricoh interactive whiteboard+87y ago09-01-2019 22:00

SQL injection vulnerability in the RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.3 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2018-16184ricoh company, ltd.ricoh interactive whiteboard+87y ago09-01-2019 22:00

RICOH Interactive Whiteboard D2200 V1.6 to V2.2, D5500 V1.6 to V2.2, D5510 V1.6 to V2.2, and the display versions with RICOH Interactive Whiteboard Controller Type1 V1.6 to V2.2 attached (D5520, D6500, D6510, D7500, D8400) allows remote attackers to execute arbitrary commands via unspecified vectors.CVE-2018-16185ricoh company, ltd.ricoh interactive whiteboard+87y ago09-01-2019 22:00

RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.1 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) allows remote attackers to execute a malicious program.CVE-2025-41439ricoh company, ltd.ricoh streamline nx1y ago30-06-2025 09:16

A reflected cross-site scripting vulnerability via a specific parameter exists in SLNX Help Documentation of RICOH Streamline NX. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of the user who accessed the product.CVE-2025-41393konica minolta japan, inc.multiple mfps which implement web image monitor+11y ago12-05-2025 08:04

Reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].CVE-2025-48825ricoh company, ltd.ricoh streamline nx v3 pc client1y ago13-06-2025 08:19

RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who can conduct a man-in-the-middle attack to eavesdrop upgrade requests and execute a malicious DLL with custom code.CVE-2025-36506ricoh company, ltd.ricoh streamline nx v3 pc client1y ago13-06-2025 08:18

External control of file name or path issue exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If an attacker sends a specially crafted request, arbitrary files in the file system can be overwritten with log data.CVE-2025-53869brother industries, ltd.multiple mfps+28mo ago29-01-2026 02:40

Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a man-in-the-middle attacker to replace the set of root certificates used by the product with a set of arbitrary certificates.CVE-2025-58422ricoh company, ltd.ricoh streamline nx1y ago08-09-2025 04:43

RICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history. If an attacker can perform a man-in-the-middle attack, they may alter the values of HTTP requests, which could result in tampering with the operation history of the product’s management tool.CVE-2025-46783ricoh company, ltd.ricoh streamline nx v3 pc client1y ago13-06-2025 08:18

Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is running by tampering with specific files used on the product.CVE-2025-49797brother industries, ltd.multiple driver installers for windows+21y ago25-06-2025 09:25

Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. If exploited, an arbitrary program may be executed with the administrative privilege. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].CVE-2022-36403ricoh company, ltd.installer of device software manager+14y ago08-09-2022 07:10

Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2022-37406ricoh company, ltd.aficio sp 4210n+13y ago07-12-2022 00:00

Cross-site scripting vulnerability in Aficio SP 4210N firmware versions prior to Web Support 1.05 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.CVE-2024-21824brother industries, ltd.multiple printers and scanners+32y ago18-03-2024 08:01

Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. If this vulnerability is exploited, a network-adjacent user who can access the product may impersonate an administrative user. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].CVE-2024-41995ricoh company, ltd.javatm platform2y ago06-08-2024 06:51

Initialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver.12.89 and earlier. If this vulnerability is exploited, the product may be affected by some known TLS1.0 and TLS1.1 vulnerabilities. As for the specific products/models/versions of MFPs and printers that contain JavaTM Platform, see the information provided by the vendor.CVE-2024-47939konica minolta, inc.multiple mfps which implement web image monitor+11y ago01-11-2024 04:29

Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].CVE-2024-36252ricoh company, ltd.ricoh streamline nx pc client2y ago19-06-2024 06:40

Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed.CVE-2024-39927ricoh company, ltd.im 460f/460ftl/370/370f+52y ago10-07-2024 06:55

Out-of-bounds write vulnerability exists in Ricoh MFPs and printers. If a remote attacker sends a specially crafted request to the affected products, the products may be able to cause a denial-of-service (DoS) condition and/or user's data may be destroyed.