CVE-2018-16185

HIGH

RICOH Interactive Whiteboard D2200/D5500/D5510/D5520/D6500/D6510/D7500/D8400 Firmware 1.1-2.2 - Remote Code Execution

Title source: llm
STIX 2.1

Description

RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.1 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) allows remote attackers to execute a malicious program.

References (2)

Core 2
Core References
Third Party Advisory third-party-advisory x_refsource_jvn
https://jvn.jp/en/jp/JVN55263945/index.html
Vendor Advisory x_refsource_misc
https://www.ricoh.com/info/2018/1127_1.html

Scores

CVSS v3 7.8
EPSS 0.0098
EPSS Percentile 58.1%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (8)
ricoh/d2200_firmware 1.1 - 2.2
ricoh/d5500_firmware 1.1 - 2.2
ricoh/d5510_firmware 1.1 - 2.2
ricoh/d5520_firmware 1.1 - 2.2
ricoh/d6500_firmware 1.1 - 2.2
ricoh/d6510_firmware 1.1 - 2.2
ricoh/d7500_firmware 1.1 - 2.2
ricoh/d8400_firmware 1.1 - 2.2
Published Jan 09, 2019
Tracked Since Feb 18, 2026