CVE-2018-16188

CRITICAL

RICOH Interactive Whiteboard D2200/D5500/D5510/D5520/D6500/D6510/D7500/D8400 Firmware 1.3-2.2 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in the RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.3 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References (2)

Core 2

Core References

Third Party Advisory third-party-advisory x_refsource_jvn

https://jvn.jp/en/jp/JVN55263945/index.html

Vendor Advisory x_refsource_misc

https://www.ricoh.com/info/2018/1127_1.html

Scores

CVSS v3 9.8

EPSS 0.0187

EPSS Percentile 77.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-89

Status published

Products (8)

ricoh/d2200_firmware 1.3 - 2.2

ricoh/d5500_firmware 1.3 - 2.2

ricoh/d5510_firmware 1.3 - 2.2

ricoh/d5520_firmware 1.3 - 2.2

ricoh/d6500_firmware 1.3 - 2.2

ricoh/d6510_firmware 1.3 - 2.2

ricoh/d7500_firmware 1.3 - 2.2

ricoh/d8400_firmware 1.3 - 2.2

Published Jan 09, 2019

Tracked Since Feb 18, 2026