CVE-2019-14304

nvd nist

Published: Jan 10, 2020Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Ricoh SP C250DN 1.06 devices allow CSRF.

Affected (52)

Products: Ricoh: Sp C250sf Firmware, Sp C252sf Firmware, Sp C250dn Firmware, Sp C252dn Firmware, M C250fw Firmware, M C250fwb Firmware, P C300w Firmware, P C301w Firmware, Sp 330sn Firmware, Sp 330sfn Firmware, Sp 330dn Firmware, Sp 3710sf Firmware, Sp 3710dn Firmware, Sp C260dnw Firmware, Sp C260sfnw Firmware, Sp C261dnw Firmware, Sp C261sfnw Firmware, Sp C262sfnw Firmware, Sp C262dnw Firmware, Mp 2014 Firmware, Mp 2014d Firmware, Mp 2014ad Firmware, M 2700 Firmware, M 2701 Firmware, Sp 221s Firmware, Sp 220snw Firmware, Sp 221snw Firmware, Sp 221sf Firmware, Sp 220sfnw Firmware, Sp 221sfnw Firmware, Sp 277snwx Firmware, Sp 277sfnwx Firmware, Sp 221 Firmware, Sp 220nw Firmware, Sp 221nw Firmware, Sp277nwx Firmware, Sp 212snw Firmware, Sp 212sfnw Firmware, Sp 212sfw Firmware, Sp 212sfnw (china) Firmware, Sp 212suw Firmware, Sp 213snw Firmware, Sp 213snw (taiwan) Firmware, Sp 213suw Firmware, Sp 213sfnw Firmware, Sp 213sfw Firmware, Sp 213sfnw (taiwan) Firmware, Sp 212nw Firmware, Sp 213nw Firmware, Sp 213nw (taiwan) Firmware, Sp 212w Firmware, Sp 213w Firmware

52 products

Sp 212sfnw (china) Firmware

Sp 212suw Firmware

Sp 213snw Firmware

Sp 213snw (taiwan) Firmware

Sp 213suw Firmware

Sp 213sfnw Firmware

Sp 213sfw Firmware

Sp 213sfnw (taiwan) Firmware

Sp 212nw Firmware

Sp 213nw Firmware

Sp 213nw (taiwan) Firmware

Sp 212w Firmware

Sp 213w Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp C250sf Firmware	Before 1.15

Running on/with	Platform Versions
Ricoh Sp C250sf	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp C252sf Firmware	Before 1.15

Running on/with	Platform Versions
Ricoh Sp C252sf	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp C250dn Firmware	Before 1.09

Running on/with	Platform Versions
Ricoh Sp C250dn	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp C252dn Firmware	Before 1.09

Running on/with	Platform Versions
Ricoh Sp C252dn	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh M C250fw Firmware	Before 1.02

Running on/with	Platform Versions
Ricoh M C250fw	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh M C250fwb Firmware	Before 1.02

Running on/with	Platform Versions
Ricoh M C250fwb	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh P C300w Firmware	Before 1.02

Running on/with	Platform Versions
Ricoh P C300w	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh P C301w Firmware	Before 1.02

Running on/with	Platform Versions
Ricoh P C301w	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 330sn Firmware	Before 1.07

Running on/with	Platform Versions
Ricoh Sp 330sn	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 330sfn Firmware	Before 1.07

Running on/with	Platform Versions
Ricoh Sp 330sfn	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 330dn Firmware	Before 1.07

Running on/with	Platform Versions
Ricoh Sp 330dn	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 3710sf Firmware	Before 1.07

Running on/with	Platform Versions
Ricoh Sp 3710sf	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 3710dn Firmware	Before 1.07

Running on/with	Platform Versions
Ricoh Sp 3710dn	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp C260dnw Firmware	Before 1.12

Running on/with	Platform Versions
Ricoh Sp C260dnw	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp C260sfnw Firmware	Before 1.15

Running on/with	Platform Versions
Ricoh Sp C260sfnw	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp C261dnw Firmware	Before 1.13

Running on/with	Platform Versions
Ricoh Sp C261dnw	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp C261sfnw Firmware	Before 1.17

Running on/with	Platform Versions
Ricoh Sp C261sfnw	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp C262sfnw Firmware	Before 1.17

Running on/with	Platform Versions
Ricoh Sp C262sfnw	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp C262dnw Firmware	Before 1.13

Running on/with	Platform Versions
Ricoh Sp C262dnw	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Mp 2014 Firmware	Before 1.10

Running on/with	Platform Versions
Ricoh Mp 2014	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Mp 2014d Firmware	Before 1.10

Running on/with	Platform Versions
Ricoh Mp 2014d	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Mp 2014ad Firmware	Before 1.10

Running on/with	Platform Versions
Ricoh Mp 2014ad	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh M 2700 Firmware	Before 1.06

Running on/with	Platform Versions
Ricoh M 2700	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh M 2701 Firmware	Before 1.06

Running on/with	Platform Versions
Ricoh M 2701	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 221s Firmware	Before 1.10

Running on/with	Platform Versions
Ricoh Sp 221s	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 220snw Firmware	Before 1.11

Running on/with	Platform Versions
Ricoh Sp 220snw	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 221snw Firmware	Before 1.11

Running on/with	Platform Versions
Ricoh Sp 221snw	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 221sf Firmware	Before 1.11

Running on/with	Platform Versions
Ricoh Sp 221sf	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 220sfnw Firmware	Before 1.12

Running on/with	Platform Versions
Ricoh Sp 220sfnw	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 221sfnw Firmware	Before 1.12

Running on/with	Platform Versions
Ricoh Sp 221sfnw	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 277snwx Firmware	Before 1.12

Running on/with	Platform Versions
Ricoh Sp 277snwx	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 277sfnwx Firmware	Before 1.12

Running on/with	Platform Versions
Ricoh Sp 277sfnwx	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 221 Firmware	Before 1.02

Running on/with	Platform Versions
Ricoh Sp 221	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 220nw Firmware	Before 1.04

Running on/with	Platform Versions
Ricoh Sp 220nw	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 221nw Firmware	Before 1.04

Running on/with	Platform Versions
Ricoh Sp 221nw	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp277nwx Firmware	Before 1.04

Running on/with	Platform Versions
Ricoh Sp277nwx	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 212snw Firmware	Before 1.07

Running on/with	Platform Versions
Ricoh Sp 212snw	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 212sfnw Firmware	Before 1.08

Running on/with	Platform Versions
Ricoh Sp 212sfnw	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 212sfw Firmware	Before 1.08

Running on/with	Platform Versions
Ricoh Sp 212sfw	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 212sfnw (china) Firmware	Before 1.08

Running on/with	Platform Versions
Ricoh Sp 212sfnw (china)	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 212suw Firmware	Before 1.07

Running on/with	Platform Versions
Ricoh Sp 212suw	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 213snw Firmware	Before 1.07

Running on/with	Platform Versions
Ricoh Sp 213snw	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 213snw (taiwan) Firmware	Before 1.05

Running on/with	Platform Versions
Ricoh Sp 213snw (taiwan)	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 213suw Firmware	Before 1.07

Running on/with	Platform Versions
Ricoh Sp 213suw	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 213sfnw Firmware	Before 1.07

Running on/with	Platform Versions
Ricoh Sp 213sfnw	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 213sfw Firmware	Before 1.07

Running on/with	Platform Versions
Ricoh Sp 213sfw	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 213sfnw (taiwan) Firmware	Before 1.06

Running on/with	Platform Versions
Ricoh Sp 213sfnw (taiwan)	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 212nw Firmware	Before 1.06

Running on/with	Platform Versions
Ricoh Sp 212nw	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 213nw Firmware	Before 1.06

Running on/with	Platform Versions
Ricoh Sp 213nw	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 213nw (taiwan) Firmware	Before 1.04

Running on/with	Platform Versions
Ricoh Sp 213nw (taiwan)	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 212w Firmware	Before 1.06

Running on/with	Platform Versions
Ricoh Sp 212w	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ricoh Sp 213w Firmware	Before 1.06

Running on/with	Platform Versions
Ricoh Sp 213w	All versions

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (4)

http://jvn.jp/en/jp/JVN52962201/index.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://www.ricoh.com/info/2019/0823_1/

Source: cve@mitre.org

Vendor Advisory

http://jvn.jp/en/jp/JVN52962201/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.ricoh.com/info/2019/0823_1/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.