CVE-2019-19363

This Metasploit module exploits a privilege escalation vulnerability in Ricoh printer drivers by writing a malicious DLL to a vulnerable directory and adding a printer to trigger its execution as SYSTEM.

This PoC exploits CVE-2019-19363 by monitoring Ricoh printer driver DLL file changes and overwriting a target DLL with a malicious one before it is loaded, achieving local privilege escalation.

This Metasploit module exploits a privilege escalation vulnerability in Ricoh printer drivers by leveraging insecure directory permissions to plant a malicious DLL, which is then loaded by a SYSTEM process during printer installation.