← Back

CVE-2018-16184

nvd nist
Published: Jan 9, 2019Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

RICOH Interactive Whiteboard D2200 V1.6 to V2.2, D5500 V1.6 to V2.2, D5510 V1.6 to V2.2, and the display versions with RICOH Interactive Whiteboard Controller Type1 V1.6 to V2.2 attached (D5520, D6500, D6510, D7500, D8400) allows remote attackers to execute arbitrary commands via unspecified vectors.

Affected (8)

Ricoh
8 products
D2200 Firmware
D5500 Firmware
D5510 Firmware
D5520 Firmware
D6500 Firmware
D6510 Firmware
D7500 Firmware
D8400 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
D2200 Firmware
From 1.6 to 2.2
Running on/withPlatform Versions
Ricoh
D2200
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
D5500 Firmware
From 1.6 to 2.2
Running on/withPlatform Versions
Ricoh
D5500
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
D5510 Firmware
From 1.6 to 2.2
Running on/withPlatform Versions
Ricoh
D5510
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
D5520 Firmware
From 1.6 to 2.2
Running on/withPlatform Versions
Ricoh
D5520
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
D6500 Firmware
From 1.6 to 2.2
Running on/withPlatform Versions
Ricoh
D6500
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
D6510 Firmware
From 1.6 to 2.2
Running on/withPlatform Versions
Ricoh
D6510
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
D7500 Firmware
From 1.6 to 2.2
Running on/withPlatform Versions
Ricoh
D7500
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
D8400 Firmware
From 1.6 to 2.2
Running on/withPlatform Versions
Ricoh
D8400
All versions

Related CWEs

CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (4)

Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.