CVE-2019-14307

HIGH

Ricoh SP C250SF/C252SF/C250DN/C252DN Firmware - Buffer Overflow via SNMP HTTP Parameter Parsing

Title source: llm
STIX 2.1

Description

Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
https://www.ricoh.com/info/2019/0823_1/
Third Party Advisory third-party-advisory x_refsource_jvn
http://jvn.jp/en/jp/JVN11708203/index.html

Scores

CVSS v3 8.8
EPSS 0.0305
EPSS Percentile 85.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (4)
ricoh/sp_c250dn_firmware < 1.07
ricoh/sp_c250sf_firmware < 1.13
ricoh/sp_c252dn_firmware < 1.07
ricoh/sp_c252sf_firmware < 1.13
Published Aug 26, 2019
Tracked Since Feb 18, 2026