CVE-2019-19363
An issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to 2020 that allows attackers local privilege escalation.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ricoh Driver - Privilege Escalation (Metasploit)2020-02-10 · local · windows · Verified
- Ricoh Printer Drivers - Local Privilege Escalation2020-01-22 · local · windows
Impact
An issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to 2020 that allows attackers local privilege escalation. Affected drivers and versions are: PCL6 Driver for Universal Print - Version 4.0 or later PS Driver for Universal Print - Version 4.0 or later PC FAX Generic Driver - All versions Generic PCL5 Driver - All versions RPCS Driver - All versions PostScript3 Driver - All versions PCL6 (PCL XL) Driver - All versions RPCS Raster Driver - All version
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ricoh | Generic Pcl5 Driver | All versions |
| Ricoh | Pc Fax Generic Driver | All versions |
| Ricoh | Pcl6 \(Pcl Xl\) Driver | All versions |
| Ricoh | Pcl6 Driver For Universal Print | from 4.0 before 4.26 |
| Ricoh | Postscript3 Driver | All versions |
| Ricoh | Ps Driver For Universal Print | from 4.0 before 4.26 |
| Ricoh | Rpcs Driver | All versions |
| Ricoh | Rpcs Raster Driver | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN15697526/index.html
- http://packetstormsecurity.com/files/156082/Ricoh-Printer-Driver-Local-Privilege-Escalation.html
- http://packetstormsecurity.com/files/156251/Ricoh-Driver-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2020/Jan/34
- https://www.ricoh.com/info/2020/0122_1/
- http://jvn.jp/en/jp/JVN15697526/index.html
- http://packetstormsecurity.com/files/156082/Ricoh-Printer-Driver-Local-Privilege-Escalation.html
- http://packetstormsecurity.com/files/156251/Ricoh-Driver-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2020/Jan/34
- https://www.ricoh.com/info/2020/0122_1/