high8.8Public exploit code
CVE-2018-15884
RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RICOH MP C4504ex Printer - Cross-Site Request Forgery (Add Admin)2018-08-27 · webapps · hardware
Impact
RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ricoh | Mp C4504ex Firmware | All versions |