critical9.8
CVE-2019-14299
Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks.
Impact
Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh printers did not implement account lockout. Therefore, it was possible to obtain the local account credentials by brute force.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ricoh | Sp C250sf Firmware | All versions |
| Ricoh | Sp C252sf Firmware | All versions |
| Ricoh | Sp C250dn Firmware | Version 1.05 |
| Ricoh | Sp C252dn Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-ricoh-printers/
- https://www.ricoh-usa.com/en/support-and-download
- https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-ricoh-printers/
- https://www.ricoh-usa.com/en/support-and-download