Ricoh Sp C252sf
13 CVEs affecting Ricoh Sp C252sf. Latest disclosed: 2022-02-15. Critical: 5, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-33945 | Critical | 9.8 | 2022-02-15 | RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 22… |
CVE-2019-14310 | Critical | 9.8 | 2020-03-13 | Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3). Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash… |
CVE-2019-14299 | Critical | 9.8 | 2020-03-13 | Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh printers did not implement account lockout. Therefore… |
CVE-2019-14300 | Critical | 9.8 | 2019-08-26 | Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or code execution via c… |
CVE-2019-14308 | Critical | 9.8 | 2019-08-26 | Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted r… |
CVE-2019-14304 | High | 8.8 | 2020-01-10 | Ricoh SP C250DN 1.06 devices allow CSRF. |
CVE-2019-14307 | High | 8.8 | 2019-08-26 | Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of service or code ex… |
CVE-2019-14305 | High | 8.8 | 2019-08-26 | Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, SMTP, and notification alerts, which allow an atta… |
CVE-2019-14309 | High | 7.5 | 2020-03-13 | Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attac… |
CVE-2019-14303 | High | 7.5 | 2020-03-13 | Ricoh SP C250DN 1.05 devices allow denial of service (issue 1 of 3). Some Ricoh printers were affected by a wrong LPD service implementation that lead to a den… |
CVE-2019-14306 | High | 7.5 | 2020-01-10 | Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2). |
CVE-2019-14301 | High | 7.5 | 2020-01-10 | Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2). |
CVE-2019-14302 | Medium | 6.8 | 2020-01-10 | On Ricoh SP C250DN 1.06 devices, a debug port can be used. |