CVE-2019-19363: ricoh generic_pcl5_driver
Vulnerability summary
CVE-2019-19363 is a high (CVSS 7.8) vulnerability in ricoh generic_pcl5_driver. EPSS estimates a 4.44% chance of exploitation in the next 30 days, higher than 91.3% of scored vulnerabilities. 4 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 0 · Duplicates 1Timeline
- 24-01-2020PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to 2020 that allows attackers local privilege escalation. Affected drivers and versions are: PCL6 Driver for Universal Print - Version 4.0 or later PS Driver for Universal Print - Version 4.0 or later PC FAX Generic Driver - All versions Generic PCL5 Driver - All versions RPCS Driver - All versions PostScript3 Driver - All versions PCL6 (PCL XL) Driver - All versions RPCS Raster Driver - All version
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
4.44%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.44% on 22-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
Ricoh Driver Privilege Escalation
exploit/windows/local/ricoh_driver_privesc
Maturity: poc
Ricoh Driver - Privilege Escalation (Metasploit)
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Ricoh8 products
- generic_pcl5_driverna
- pc_fax_generic_driverna
- pcl6_driver_for_universal_print≥ 4.0, < 4.26
- pcl6_\(pcl_xl\)_driverna
- postscript3_driverna
1 vendor · 8 products
References
5 links- packetstormsecurity.com/files/156082/Ricoh-Printer-Driver-Local-Privilege-Escalation.htmlX Refsource MISCThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/156251/Ricoh-Driver-Privilege-Escalation.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry