CVE-2019-14306 : Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).

Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).

Published 2020-01-10 18:15:12

Updated 2023-01-31 19:50:20

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2019-14306

Ricoh » Sp C250sf Firmware
Versions before (<) 1.15
cpe:2.3:o:ricoh:sp_c250sf_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp C250sf » Version: N/A
Ricoh » Sp C252sf Firmware
Versions before (<) 1.15
cpe:2.3:o:ricoh:sp_c252sf_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp C252sf » Version: N/A
Ricoh » Sp C250dn Firmware
Versions before (<) 1.09
cpe:2.3:o:ricoh:sp_c250dn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp C250dn » Version: N/A
Ricoh » Sp C252dn Firmware
Versions before (<) 1.09
cpe:2.3:o:ricoh:sp_c252dn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp C252dn » Version: N/A
Ricoh » Sp 330sn Firmware
Versions before (<) 1.07
cpe:2.3:o:ricoh:sp_330sn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 330sn » Version: N/A
Ricoh » Sp 330sfn Firmware
Versions before (<) 1.07
cpe:2.3:o:ricoh:sp_330sfn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 330sfn » Version: N/A
Ricoh » Sp 330dn Firmware
Versions before (<) 1.07
cpe:2.3:o:ricoh:sp_330dn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 330dn » Version: N/A
Ricoh » Sp 3710sf Firmware
Versions before (<) 1.07
cpe:2.3:o:ricoh:sp_3710sf_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 3710sf » Version: N/A
Ricoh » Sp 3710dn Firmware
Versions before (<) 1.07
cpe:2.3:o:ricoh:sp_3710dn_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 3710dn » Version: N/A
Ricoh » Sp C260dnw Firmware
Versions before (<) 1.12
cpe:2.3:o:ricoh:sp_c260dnw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp C260dnw » Version: N/A
Ricoh » Sp C260sfnw Firmware
Versions before (<) 1.15
cpe:2.3:o:ricoh:sp_c260sfnw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp C260sfnw » Version: N/A
Ricoh » Sp C261dnw Firmware
Versions before (<) 1.13
cpe:2.3:o:ricoh:sp_c261dnw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp C261dnw » Version: N/A
Ricoh » Sp C261sfnw Firmware
Versions before (<) 1.17
cpe:2.3:o:ricoh:sp_c261sfnw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp C261sfnw » Version: N/A
Ricoh » Sp C262sfnw Firmware
Versions before (<) 1.17
cpe:2.3:o:ricoh:sp_c262sfnw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp C262sfnw » Version: N/A
Ricoh » Sp C262dnw Firmware
Versions before (<) 1.13
cpe:2.3:o:ricoh:sp_c262dnw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp C262dnw » Version: N/A
Ricoh » Mp 2014 Firmware
Versions before (<) 1.10
cpe:2.3:o:ricoh:mp_2014_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp 2014 » Version: N/A
Ricoh » Mp 2014d Firmware
Versions before (<) 1.10
cpe:2.3:o:ricoh:mp_2014d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp 2014d » Version: N/A
Ricoh » Mp 2014ad Firmware
Versions before (<) 1.10
cpe:2.3:o:ricoh:mp_2014ad_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp 2014ad » Version: N/A
Ricoh » M 2700 Firmware
Versions before (<) 1.06
cpe:2.3:o:ricoh:m_2700_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » M 2700 » Version: N/A
Ricoh » M 2701 Firmware
Versions before (<) 1.06
cpe:2.3:o:ricoh:m_2701_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » M 2701 » Version: N/A
Ricoh » Sp 221s Firmware
Versions before (<) 1.10
cpe:2.3:o:ricoh:sp_221s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 221s » Version: N/A
Ricoh » Sp 220snw Firmware
Versions before (<) 1.11
cpe:2.3:o:ricoh:sp_220snw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 220snw » Version: N/A
Ricoh » Sp 221snw Firmware
Versions before (<) 1.11
cpe:2.3:o:ricoh:sp_221snw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 221snw » Version: N/A
Ricoh » Sp 221sf Firmware
Versions before (<) 1.11
cpe:2.3:o:ricoh:sp_221sf_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 221sf » Version: N/A
Ricoh » Sp 220sfnw Firmware
Versions before (<) 1.12
cpe:2.3:o:ricoh:sp_220sfnw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 220sfnw » Version: N/A
Ricoh » Sp 221sfnw Firmware
Versions before (<) 1.12
cpe:2.3:o:ricoh:sp_221sfnw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 221sfnw » Version: N/A
Ricoh » Sp 277snwx Firmware
Versions before (<) 1.12
cpe:2.3:o:ricoh:sp_277snwx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 277snwx » Version: N/A
Ricoh » Sp 277sfnwx Firmware
Versions before (<) 1.12
cpe:2.3:o:ricoh:sp_277sfnwx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 277sfnwx » Version: N/A
Ricoh » Sp 221 Firmware
Versions before (<) 1.02
cpe:2.3:o:ricoh:sp_221_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 221 » Version: N/A
Ricoh » Sp 220nw Firmware
Versions before (<) 1.04
cpe:2.3:o:ricoh:sp_220nw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 220nw » Version: N/A
Ricoh » Sp 221nw Firmware
Versions before (<) 1.04
cpe:2.3:o:ricoh:sp_221nw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 221nw » Version: N/A
Ricoh » Sp277nwx Firmware
Versions before (<) 1.04
cpe:2.3:o:ricoh:sp277nwx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp277nwx » Version: N/A
Ricoh » Sp 212snw Firmware
Versions before (<) 1.07
cpe:2.3:o:ricoh:sp_212snw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 212snw » Version: N/A
Ricoh » Sp 212sfnw Firmware
Versions before (<) 1.08
cpe:2.3:o:ricoh:sp_212sfnw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 212sfnw » Version: N/A
Ricoh » Sp 212sfw Firmware
Versions before (<) 1.08
cpe:2.3:o:ricoh:sp_212sfw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 212sfw » Version: N/A
Ricoh » Sp 212sfnw (china) Firmware
Versions before (<) 1.08
cpe:2.3:o:ricoh:sp_212sfnw_\(china\)_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 212sfnw (china) » Version: N/A
Ricoh » Sp 212suw Firmware
Versions before (<) 1.07
cpe:2.3:o:ricoh:sp_212suw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 212suw » Version: N/A
Ricoh » Sp 213snw Firmware
Versions before (<) 1.07
cpe:2.3:o:ricoh:sp_213snw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 213snw » Version: N/A
Ricoh » Sp 213snw (taiwan) Firmware
Versions before (<) 1.05
cpe:2.3:o:ricoh:sp_213snw_\(taiwan\)_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 213snw (taiwan) » Version: N/A
Ricoh » Sp 213suw Firmware
Versions before (<) 1.07
cpe:2.3:o:ricoh:sp_213suw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 213suw » Version: N/A
Ricoh » Sp 213sfnw Firmware
Versions before (<) 1.07
cpe:2.3:o:ricoh:sp_213sfnw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 213sfnw » Version: N/A
Ricoh » Sp 213sfw Firmware
Versions before (<) 1.07
cpe:2.3:o:ricoh:sp_213sfw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 213sfw » Version: N/A
Ricoh » Sp 213sfnw (taiwan) Firmware
Versions before (<) 1.06
cpe:2.3:o:ricoh:sp_213sfnw_\(taiwan\)_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 213sfnw (taiwan) » Version: N/A
Ricoh » Sp 212nw Firmware
Versions before (<) 1.06
cpe:2.3:o:ricoh:sp_212nw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 212nw » Version: N/A
Ricoh » Sp 213nw Firmware
Versions before (<) 1.06
cpe:2.3:o:ricoh:sp_213nw_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 213nw » Version: N/A
Ricoh » Sp 213nw (taiwan) Firmware
Versions before (<) 1.04
cpe:2.3:o:ricoh:sp_213nw_\(taiwan\)_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 213nw (taiwan) » Version: N/A
Ricoh » Sp 212w Firmware
Versions before (<) 1.06
cpe:2.3:o:ricoh:sp_212w_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 212w » Version: N/A
Ricoh » Sp 213w Firmware
Versions before (<) 1.06
cpe:2.3:o:ricoh:sp_213w_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Sp 213w » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-14306

EPSS FAQ

0.15%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 50 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-14306

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

References for CVE-2019-14306

https://www.ricoh.com/info/2019/0823_1/

Potential security vulnerabilities in some of Ricoh’s printers and Multifunction Printers (MFPs) | Global | Ricoh
Vendor Advisory

CVEs referencing this url
http://jvn.jp/en/jp/JVN52962201/index.html

JVN#52962201: Multiple vulnerabilities in RICOH printers
Third Party Advisory;VDB Entry

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2019-14306

Products affected by CVE-2019-14306

Exploit prediction scoring system (EPSS) score for CVE-2019-14306

CVSS scores for CVE-2019-14306

References for CVE-2019-14306