CVE-2018-16186

HIGH

RICOH Interactive Whiteboard D2200/D5500/D5510/D5520/D6500/D6510/D7500/D8400 Firmware 1.1-2.2 Hard-coded Credentials

Title source: llm
STIX 2.1

Description

RICOH Interactive Whiteboard D2200 V1.1 to V2.2, D5500 V1.1 to V2.2, D5510 V1.1 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.1 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) uses hard-coded credentials, which may allow an attacker on the same network segments to login to the administrators settings screen and change the configuration.

References (2)

Core 2
Core References
Third Party Advisory third-party-advisory x_refsource_jvn
https://jvn.jp/en/jp/JVN55263945/index.html
Vendor Advisory x_refsource_misc
https://www.ricoh.com/info/2018/1127_1.html

Scores

CVSS v3 8.8
EPSS 0.0060
EPSS Percentile 44.2%
Attack Vector ADJACENT_NETWORK
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-798
Status published
Products (8)
ricoh/d2200_firmware 1.1 - 2.2
ricoh/d5500_firmware 1.1 - 2.2
ricoh/d5510_firmware 1.1 - 2.2
ricoh/d5520_firmware 1.1 - 2.2
ricoh/d6500_firmware 1.1 - 2.2
ricoh/d6510_firmware 1.1 - 2.2
ricoh/d7500_firmware 1.1 - 2.2
ricoh/d8400_firmware 1.1 - 2.2
Published Jan 09, 2019
Tracked Since Feb 18, 2026