CVE-2022-43969 : Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.

Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.

Published 2023-02-16 14:15:17

Updated 2025-03-19 15:15:41

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2022-43969

Ricoh » Mp C4504ex Firmware
Versions up to, including, (<=) 1.15
cpe:2.3:o:ricoh:mp_c4504ex_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C4504ex » Version: N/A
Ricoh » Mp C307 Firmware
Versions up to, including, (<=) 1.14
cpe:2.3:o:ricoh:mp_c307_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C307 » Version: N/A
Ricoh » Mp 305+ Firmware
Versions up to, including, (<=) 1.12
cpe:2.3:o:ricoh:mp_305\+_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp 305+ » Version: N/A
Ricoh » Mp C6003 Firmware
Versions up to, including, (<=) 1.12
cpe:2.3:o:ricoh:mp_c6003_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C6003 » Version: N/A
Ricoh » Mp C407 Firmware
Versions up to, including, (<=) 1.14
cpe:2.3:o:ricoh:mp_c407_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C407 » Version: N/A
Ricoh » Mp C406 Firmware
Versions up to, including, (<=) 1.20
cpe:2.3:o:ricoh:mp_c406_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C406 » Version: N/A
Ricoh » Mp C306 Firmware
Versions up to, including, (<=) 1.20
cpe:2.3:o:ricoh:mp_c306_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C306 » Version: N/A
Ricoh » Im Cw2200 Firmware
Versions up to, including, (<=) 1.01
cpe:2.3:o:ricoh:im_cw2200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im Cw2200 » Version: N/A
Ricoh » Im Cw2201 Firmware
Versions up to, including, (<=) 1.11
cpe:2.3:o:ricoh:im_cw2201_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im Cw2201 » Version: N/A
Ricoh » Mp 402spf Firmware
Versions up to, including, (<=) 1.12
cpe:2.3:o:ricoh:mp_402spf_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp 402spf » Version: N/A
Ricoh » Mp C2003 Smart Operation Panel Firmware
Versions up to, including, (<=) 1.14
cpe:2.3:o:ricoh:mp_c2003_smart_operation_panel_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C2003 Smart Operation Panel » Version: N/A
Ricoh » Mp C2503 Smart Operation Panel Firmware
Versions up to, including, (<=) 1.14
cpe:2.3:o:ricoh:mp_c2503_smart_operation_panel_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C2503 Smart Operation Panel » Version: N/A
Ricoh » Mp C2003 Firmware
Versions up to, including, (<=) 1.17
cpe:2.3:o:ricoh:mp_c2003_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C2003 » Version: N/A
Ricoh » Mp C2503 Firmware
Versions up to, including, (<=) 1.17
cpe:2.3:o:ricoh:mp_c2503_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C2503 » Version: N/A
Ricoh » Mp C4503 Firmware
Versions up to, including, (<=) 1.12
cpe:2.3:o:ricoh:mp_c4503_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C4503 » Version: N/A
Ricoh » Mp C5503 Firmware
Versions up to, including, (<=) 1.12
cpe:2.3:o:ricoh:mp_c5503_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C5503 » Version: N/A
Ricoh » Mp C3003 Firmware
Versions up to, including, (<=) 1.19
cpe:2.3:o:ricoh:mp_c3003_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C3003 » Version: N/A
Ricoh » Mp C3503 Firmware
Versions up to, including, (<=) 1.19
cpe:2.3:o:ricoh:mp_c3503_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C3503 » Version: N/A
Ricoh » Mp C4503 Smart Operation Panel Firmware
Versions up to, including, (<=) 2.17
cpe:2.3:o:ricoh:mp_c4503_smart_operation_panel_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C4503 Smart Operation Panel » Version: N/A
Ricoh » Mp C5503 Smart Operation Panel Firmware
Versions up to, including, (<=) 2.17
cpe:2.3:o:ricoh:mp_c5503_smart_operation_panel_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C5503 Smart Operation Panel » Version: N/A
Ricoh » Mp C6003 Smart Operation Panel Firmware
Versions up to, including, (<=) 2.17
cpe:2.3:o:ricoh:mp_c6003_smart_operation_panel_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C6003 Smart Operation Panel » Version: N/A
Ricoh » Mp C3003 Smart Operation Panel Firmware
Versions up to, including, (<=) 2.15
cpe:2.3:o:ricoh:mp_c3003_smart_operation_panel_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C3003 Smart Operation Panel » Version: N/A
Ricoh » Mp C3503 Smart Operation Panel Firmware
Versions up to, including, (<=) 2.15
cpe:2.3:o:ricoh:mp_c3503_smart_operation_panel_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C3503 Smart Operation Panel » Version: N/A
Ricoh » Mp C2004ex Firmware
Versions up to, including, (<=) 1.15
cpe:2.3:o:ricoh:mp_c2004ex_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C2004ex » Version: N/A
Ricoh » Mp C2504ex Firmware
Versions up to, including, (<=) 1.15
cpe:2.3:o:ricoh:mp_c2504ex_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C2504ex » Version: N/A
Ricoh » Mp C5504ex Firmware
Versions up to, including, (<=) 1.15
cpe:2.3:o:ricoh:mp_c5504ex_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C5504ex » Version: N/A
Ricoh » Mp C6004ex Firmware
Versions up to, including, (<=) 1.15
cpe:2.3:o:ricoh:mp_c6004ex_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C6004ex » Version: N/A
Ricoh » Mp C3004ex Firmware
Versions up to, including, (<=) 1.15
cpe:2.3:o:ricoh:mp_c3004ex_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C3004ex » Version: N/A
Ricoh » Mp C3504ex Firmware
Versions up to, including, (<=) 1.15
cpe:2.3:o:ricoh:mp_c3504ex_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C3504ex » Version: N/A
Ricoh » Pro C5300s Firmware
Versions up to, including, (<=) 1.07
cpe:2.3:o:ricoh:pro_c5300s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Pro C5300s » Version: N/A
Ricoh » Pro C5310s Firmware
Versions up to, including, (<=) 1.07
cpe:2.3:o:ricoh:pro_c5310s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Pro C5310s » Version: N/A
Ricoh » M C2001 Firmware
Versions up to, including, (<=) 1.01
cpe:2.3:o:ricoh:m_c2001_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » M C2001 » Version: N/A
Ricoh » Im C530f Firmware
Versions up to, including, (<=) 6.17
cpe:2.3:o:ricoh:im_c530f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C530f » Version: N/A
Ricoh » Im C530fb Firmware
Versions up to, including, (<=) 6.17
cpe:2.3:o:ricoh:im_c530fb_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C530fb » Version: N/A
Ricoh » Im 350f Firmware
Versions up to, including, (<=) 1.10
cpe:2.3:o:ricoh:im_350f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 350f » Version: N/A
Ricoh » Im 350 Firmware
Versions up to, including, (<=) 1.10
cpe:2.3:o:ricoh:im_350_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 350 » Version: N/A
Ricoh » Im 430f Firmware
Versions up to, including, (<=) 1.10
cpe:2.3:o:ricoh:im_430f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 430f » Version: N/A
Ricoh » Im 430fb Firmware
Versions up to, including, (<=) 1.10
cpe:2.3:o:ricoh:im_430fb_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 430fb » Version: N/A
Ricoh » Im 550f Firmware
Versions up to, including, (<=) 5.02
cpe:2.3:o:ricoh:im_550f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 550f » Version: N/A
Ricoh » Im 600f Firmware
Versions up to, including, (<=) 5.02
cpe:2.3:o:ricoh:im_600f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 600f » Version: N/A
Ricoh » Im 600srf Firmware
Versions up to, including, (<=) 5.02
cpe:2.3:o:ricoh:im_600srf_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 600srf » Version: N/A
Ricoh » Im 7000 Firmware
Versions up to, including, (<=) 2.02
cpe:2.3:o:ricoh:im_7000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 7000 » Version: N/A
Ricoh » Im 8000 Firmware
Versions up to, including, (<=) 2.02
cpe:2.3:o:ricoh:im_8000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 8000 » Version: N/A
Ricoh » Im 9000 Firmware
Versions up to, including, (<=) 2.02
cpe:2.3:o:ricoh:im_9000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 9000 » Version: N/A
Ricoh » Mp 2555 Firmware
Versions up to, including, (<=) 1.18
cpe:2.3:o:ricoh:mp_2555_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp 2555 » Version: N/A
Ricoh » Mp 3055 Firmware
Versions up to, including, (<=) 1.18
cpe:2.3:o:ricoh:mp_3055_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp 3055 » Version: N/A
Ricoh » Mp 3555 Firmware
Versions up to, including, (<=) 1.18
cpe:2.3:o:ricoh:mp_3555_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp 3555 » Version: N/A
Ricoh » Mp 4055 Firmware
Versions up to, including, (<=) 1.18
cpe:2.3:o:ricoh:mp_4055_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp 4055 » Version: N/A
Ricoh » Mp 5055 Firmware
Versions up to, including, (<=) 1.18
cpe:2.3:o:ricoh:mp_5055_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp 5055 » Version: N/A
Ricoh » Mp 6055 Firmware
Versions up to, including, (<=) 1.18
cpe:2.3:o:ricoh:mp_6055_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp 6055 » Version: N/A
Ricoh » Im 2500 Firmware
Versions up to, including, (<=) 4.02
cpe:2.3:o:ricoh:im_2500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 2500 » Version: N/A
Ricoh » Im 3000 Firmware
Versions up to, including, (<=) 4.02
cpe:2.3:o:ricoh:im_3000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 3000 » Version: N/A
Ricoh » Im 3500 Firmware
Versions up to, including, (<=) 4.02
cpe:2.3:o:ricoh:im_3500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 3500 » Version: N/A
Ricoh » Im 4000 Firmware
Versions up to, including, (<=) 4.02
cpe:2.3:o:ricoh:im_4000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 4000 » Version: N/A
Ricoh » Im 5000 Firmware
Versions up to, including, (<=) 4.02
cpe:2.3:o:ricoh:im_5000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 5000 » Version: N/A
Ricoh » Im 6000 Firmware
Versions up to, including, (<=) 4.02
cpe:2.3:o:ricoh:im_6000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 6000 » Version: N/A
Ricoh » Im 2702 Firmware
Versions up to, including, (<=) 1.12
cpe:2.3:o:ricoh:im_2702_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im 2702 » Version: N/A
Ricoh » Im C400f Firmware
Versions up to, including, (<=) 5.03
cpe:2.3:o:ricoh:im_c400f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C400f » Version: N/A
Ricoh » Im C300f Firmware
Versions up to, including, (<=) 5.03
cpe:2.3:o:ricoh:im_c300f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C300f » Version: N/A
Ricoh » Im C300 Firmware
Versions up to, including, (<=) 5.03
cpe:2.3:o:ricoh:im_c300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C300 » Version: N/A
Ricoh » Im C400srf Firmware
Versions up to, including, (<=) 5.03
cpe:2.3:o:ricoh:im_c400srf_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C400srf » Version: N/A
Ricoh » Im C2000 Firmware
Versions up to, including, (<=) 6.03
cpe:2.3:o:ricoh:im_c2000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C2000 » Version: N/A
Ricoh » Im C2500 Firmware
Versions up to, including, (<=) 6.03
cpe:2.3:o:ricoh:im_c2500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C2500 » Version: N/A
Ricoh » Im C6000 Firmware
Versions up to, including, (<=) 6.03
cpe:2.3:o:ricoh:im_c6000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C6000 » Version: N/A
Ricoh » Im C5500 Firmware
Versions up to, including, (<=) 6.03
cpe:2.3:o:ricoh:im_c5500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C5500 » Version: N/A
Ricoh » Im C3000 Firmware
Versions up to, including, (<=) 6.03
cpe:2.3:o:ricoh:im_c3000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C3000 » Version: N/A
Ricoh » Im C3500 Firmware
Versions up to, including, (<=) 6.03
cpe:2.3:o:ricoh:im_c3500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C3500 » Version: N/A
Ricoh » Im C4500 Firmware
Versions up to, including, (<=) 6.03
cpe:2.3:o:ricoh:im_c4500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C4500 » Version: N/A
Ricoh » Mp C2504 Firmware
Versions up to, including, (<=) 1.21
cpe:2.3:o:ricoh:mp_c2504_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C2504 » Version: N/A
Ricoh » Mp C2004 Firmware
Versions up to, including, (<=) 1.21
cpe:2.3:o:ricoh:mp_c2004_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C2004 » Version: N/A
Ricoh » Mp C4504 Firmware
Versions up to, including, (<=) 1.22
cpe:2.3:o:ricoh:mp_c4504_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C4504 » Version: N/A
Ricoh » Mp C5504 Firmware
Versions up to, including, (<=) 1.22
cpe:2.3:o:ricoh:mp_c5504_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C5504 » Version: N/A
Ricoh » Mp C6004 Firmware
Versions up to, including, (<=) 1.22
cpe:2.3:o:ricoh:mp_c6004_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C6004 » Version: N/A
Ricoh » Mp C3504 Firmware
Versions up to, including, (<=) 1.21
cpe:2.3:o:ricoh:mp_c3504_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C3504 » Version: N/A
Ricoh » Mp C3004 Firmware
Versions up to, including, (<=) 1.21
cpe:2.3:o:ricoh:mp_c3004_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Mp C3004 » Version: N/A
Ricoh » Im C6500 Firmware
Versions up to, including, (<=) 4.0
cpe:2.3:o:ricoh:im_c6500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C6500 » Version: N/A
Ricoh » Im C8000 Firmware
Versions up to, including, (<=) 4.0
cpe:2.3:o:ricoh:im_c8000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Ricoh » Im C8000 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-43969

EPSS FAQ

0.17%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 35 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-43969

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	3.9	5.2	134c704f-9b21-4f2e-91b3-4a467353bcc0	2025-03-19
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: None
9.1	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N	3.9	5.2	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: None

CWE ids for CVE-2022-43969

CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2022-43969

https://www.ricoh.com/software/dev_soft_manager

Device Software Manager | Global | Ricoh
Product

CVEs referencing this url
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2022-000002

Information List by Vulnerability | Global | Ricoh
Vendor Advisory

Jump to

Vulnerability Details : CVE-2022-43969

Products affected by CVE-2022-43969

Exploit prediction scoring system (EPSS) score for CVE-2022-43969

CVSS scores for CVE-2022-43969

CWE ids for CVE-2022-43969

References for CVE-2022-43969