Sign-up

ID

VAR-201908-0931


CVE

CVE-2019-14305


TITLE

Multiple buffer overflow vulnerabilities in multiple Ricoh printers and Multifunction Printers (MFPs)

Trust: 0.8

sources: JVNDB: JVNDB-2019-000058

DESCRIPTION

Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for Wi-Fi, mDNS, POP3, SMTP, and notification alerts, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*. Multiple printers and Multifunction Printers (MFPs) provided by RICOH COMPANY, LTD. contain multiple buffer overflows vulnerabilities listed below. * Buffer overflow in parsing HTTP cookie header (CWE-119) - CVE-2019-14300 * Buffer overflow in parsing HTTP parameter setting for Wifi, mDNS, POP3, SMTP and alert (CWE-119) - CVE-2019-14305 * Buffer overflow in parsing HTTP parameter setting for SNMP (CWE-119) - CVE-2019-14307 * Buffer overflow in parsing LPD packet (CWE-119) - CVE-2019-14308 RICOH COMPANY, LTD. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and RICOH COMPANY, LTD. coordinated under the Information Security Early Warning Partnership.A remote attacker may be able to cause a denial-of-service (DoS) condition or may execute arbitrary code. RICOH SP C252SF, etc. A buffer error vulnerability exists in several RICOH printers. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations. Attackers can exploit this vulnerability to cause buffer overflow or heap overflow, etc. The following products and versions are affected: RICOH SP C250SF with firmware prior to 1.07; SP C252SF with firmware prior to 1.07; SP C250DN with firmware prior to 1.13; SP C252DN with firmware prior to 1.13

Trust: 1.71

sources: NVD: CVE-2019-14305 // JVNDB: JVNDB-2019-000058 // VULHUB: VHN-146238

IOT TAXONOMY

category:['home & office device']sub_category:printer

Trust: 0.1

sources: OTHER: None

AFFECTED PRODUCTS

vendor:ricohmodel:sp c252sfscope:ltversion:1.13

Trust: 1.0

vendor:ricohmodel:sp c252dnscope:ltversion:1.07

Trust: 1.0

vendor:ricohmodel:sp c250sfscope:ltversion:1.13

Trust: 1.0

vendor:ricohmodel:sp c250dnscope:ltversion:1.07

Trust: 1.0

vendor:ricohmodel:sp c250dnscope:eqversion:firmware prior to ver.1.13

Trust: 0.8

vendor:ricohmodel:sp c250sfscope:eqversion:firmware prior to ver.1.13

Trust: 0.8

vendor:ricohmodel:sp c252dnscope:eqversion:firmware prior to ver.1.07

Trust: 0.8

vendor:ricohmodel:sp c252sfscope:eqversion:firmware prior to ver.1.07

Trust: 0.8

sources: JVNDB: JVNDB-2019-000058 // NVD: CVE-2019-14305

CVSS

SEVERITY

CVSSV2

CVSSV3

IPA: JVNDB-2019-000058
value: CRITICAL

Trust: 3.2

nvd@nist.gov: CVE-2019-14305
value: CRITICAL

Trust: 1.0

cve@mitre.org: CVE-2019-14305
value: HIGH

Trust: 1.0

CNNVD: CNNVD-201908-2000
value: CRITICAL

Trust: 0.6

VULHUB: VHN-146238
value: HIGH

Trust: 0.1

IPA: JVNDB-2019-000058
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 3.2

nvd@nist.gov: CVE-2019-14305
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-146238
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

IPA: JVNDB-2019-000058
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 3.2

nvd@nist.gov: CVE-2019-14305
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.0

Trust: 1.0

cve@mitre.org: CVE-2019-14305
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 5.9
version: 3.0

Trust: 1.0

sources: VULHUB: VHN-146238 // JVNDB: JVNDB-2019-000058 // JVNDB: JVNDB-2019-000058 // JVNDB: JVNDB-2019-000058 // JVNDB: JVNDB-2019-000058 // CNNVD: CNNVD-201908-2000 // NVD: CVE-2019-14305 // NVD: CVE-2019-14305

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.9

sources: VULHUB: VHN-146238 // JVNDB: JVNDB-2019-000058 // NVD: CVE-2019-14305

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201908-2000

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201908-2000

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2019-000058

PATCH
title:Potential security vulnerabilities in some of Ricoh’s printers and Multifunction Printers (MFPs)url:https://www.ricoh.com/info/2019/0823_1/
Trust: 0.8
title:Multiple RICOH Product security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=97476
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2019-000058 // 
            
            
            
            CNNVD: CNNVD-201908-2000

EXTERNAL IDS
db:NVDid:CVE-2019-14305
Trust: 2.6
db:JVNid:JVN11708203
Trust: 2.5
db:JVNDBid:JVNDB-2019-000058
Trust: 1.4
db:CNNVDid:CNNVD-201908-2000
Trust: 0.7
db:OTHERid:NONE
Trust: 0.1
db:VULHUBid:VHN-146238
Trust: 0.1
sources:
            
            
            OTHER: None // 
            
            
            
            VULHUB: VHN-146238 // 
            
            
            
            JVNDB: JVNDB-2019-000058 // 
            
            
            
            CNNVD: CNNVD-201908-2000 // 
            
            
            
            NVD: CVE-2019-14305

REFERENCES
url:http://jvn.jp/en/jp/jvn11708203/index.html
Trust: 3.1
url:https://www.ricoh.com/info/2019/0823_1/
Trust: 1.7
url:https://nvd.nist.gov/vuln/detail/cve-2019-14305
Trust: 1.4
url:https://www.ricoh-usa.com/en/support-and-download
Trust: 1.1
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14300
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14305
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14307
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-14308
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-14308
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-14300
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-14307
Trust: 0.8
url:https://jvndb.jvn.jp/en/contents/2019/jvndb-2019-000058.html
Trust: 0.6
url:https://ieeexplore.ieee.org/abstract/document/10769424
Trust: 0.1
sources:
            
            
            OTHER: None // 
            
            
            
            VULHUB: VHN-146238 // 
            
            
            
            JVNDB: JVNDB-2019-000058 // 
            
            
            
            CNNVD: CNNVD-201908-2000 // 
            
            
            
            NVD: CVE-2019-14305

SOURCES
db:OTHERid: - 
db:VULHUBid:VHN-146238
db:JVNDBid:JVNDB-2019-000058
db:CNNVDid:CNNVD-201908-2000
db:NVDid:CVE-2019-14305

LAST UPDATE DATE
2025-01-30T21:10:19.113000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-146238date:2019-09-13T00:00:00
db:JVNDBid:JVNDB-2019-000058date:2019-09-13T00:00:00
db:CNNVDid:CNNVD-201908-2000date:2019-09-18T00:00:00
db:NVDid:CVE-2019-14305date:2024-11-21T04:26:27.340

SOURCES RELEASE DATE
db:VULHUBid:VHN-146238date:2019-08-26T00:00:00
db:JVNDBid:JVNDB-2019-000058date:2019-09-13T00:00:00
db:CNNVDid:CNNVD-201908-2000date:2019-08-26T00:00:00
db:NVDid:CVE-2019-14305date:2019-08-26T15:15:11.737