CVE-2018-16184

CRITICAL

RICOH Interactive Whiteboard D2200/D5500/D5510/D5520/D6500/D6510/D7500/D8400 1.6-2.2 - OS Command Injection

Title source: llm
STIX 2.1

Description

RICOH Interactive Whiteboard D2200 V1.6 to V2.2, D5500 V1.6 to V2.2, D5510 V1.6 to V2.2, and the display versions with RICOH Interactive Whiteboard Controller Type1 V1.6 to V2.2 attached (D5520, D6500, D6510, D7500, D8400) allows remote attackers to execute arbitrary commands via unspecified vectors.

References (2)

Core 2
Core References
Third Party Advisory third-party-advisory x_refsource_jvn
https://jvn.jp/en/jp/JVN55263945/index.html
Vendor Advisory x_refsource_misc
https://www.ricoh.com/info/2018/1127_1.html

Scores

CVSS v3 9.8
EPSS 0.0432
EPSS Percentile 90.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (8)
ricoh/d2200_firmware 1.6 - 2.2
ricoh/d5500_firmware 1.6 - 2.2
ricoh/d5510_firmware 1.6 - 2.2
ricoh/d5520_firmware 1.6 - 2.2
ricoh/d6500_firmware 1.6 - 2.2
ricoh/d6510_firmware 1.6 - 2.2
ricoh/d7500_firmware 1.6 - 2.2
ricoh/d8400_firmware 1.6 - 2.2
Published Jan 09, 2019
Tracked Since Feb 18, 2026