Lucene search

K
cve[email protected]CVE-2019-14306
HistoryJan 10, 2020 - 6:15 p.m.

CVE-2019-14306

2020-01-1018:15:11
web.nvd.nist.gov
95
ricoh
sp c250dn
1.06
incorrect access control
cve-2019-14306
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.9%

Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).

Affected configurations

NVD
Node
ricohsp_c250sf_firmwareRange<1.15
AND
ricohsp_c250sfMatch-
Node
ricohsp_c252sf_firmwareRange<1.15
AND
ricohsp_c252sfMatch-
Node
ricohsp_c250dn_firmwareRange<1.09
AND
ricohsp_c250dnMatch-
Node
ricohsp_c252dn_firmwareRange<1.09
AND
ricohsp_c252dnMatch-
Node
ricohsp_330sn_firmwareRange<1.07
AND
ricohsp_330snMatch-
Node
ricohsp_330sfn_firmwareRange<1.07
AND
ricohsp_330sfnMatch-
Node
ricohsp_330dn_firmwareRange<1.07
AND
ricohsp_330dnMatch-
Node
ricohsp_3710sf_firmwareRange<1.07
AND
ricohsp_3710sfMatch-
Node
ricohsp_3710dn_firmwareRange<1.07
AND
ricohsp_3710dnMatch-
Node
ricohsp_c260dnw_firmwareRange<1.12
AND
ricohsp_c260dnwMatch-
Node
ricohsp_c260sfnw_firmwareRange<1.15
AND
ricohsp_c260sfnwMatch-
Node
ricohsp_c261dnw_firmwareRange<1.13
AND
ricohsp_c261dnwMatch-
Node
ricohsp_c261sfnw_firmwareRange<1.17
AND
ricohsp_c261sfnwMatch-
Node
ricohsp_c262sfnw_firmwareRange<1.17
AND
ricohsp_c262sfnwMatch-
Node
ricohsp_c262dnw_firmwareRange<1.13
AND
ricohsp_c262dnwMatch-
Node
ricohmp_2014_firmwareRange<1.10
AND
ricohmp_2014Match-
Node
ricohmp_2014d_firmwareRange<1.10
AND
ricohmp_2014dMatch-
Node
ricohmp_2014ad_firmwareRange<1.10
AND
ricohmp_2014adMatch-
Node
ricohm_2700_firmwareRange<1.06
AND
ricohm_2700Match-
Node
ricohm_2701_firmwareRange<1.06
AND
ricohm_2701Match-
Node
ricohsp_221s_firmwareRange<1.10
AND
ricohsp_221sMatch-
Node
ricohsp_220snw_firmwareRange<1.11
AND
ricohsp_220snwMatch-
Node
ricohsp_221snw_firmwareRange<1.11
AND
ricohsp_221snwMatch-
Node
ricohsp_221sf_firmwareRange<1.11
AND
ricohsp_221sfMatch-
Node
ricohsp_220sfnw_firmwareRange<1.12
AND
ricohsp_220sfnwMatch-
Node
ricohsp_221sfnw_firmwareRange<1.12
AND
ricohsp_221sfnwMatch-
Node
ricohsp_277snwx_firmwareRange<1.12
AND
ricohsp_277snwxMatch-
Node
ricohsp_277sfnwx_firmwareRange<1.12
AND
ricohsp_277sfnwxMatch-
Node
ricohsp_221_firmwareRange<1.02
AND
ricohsp_221Match-
Node
ricohsp_220nw_firmwareRange<1.04
AND
ricohsp_220nwMatch-
Node
ricohsp_221nw_firmwareRange<1.04
AND
ricohsp_221nwMatch-
Node
ricohsp277nwx_firmwareRange<1.04
AND
ricohsp277nwxMatch-
Node
ricohsp_212snw_firmwareRange<1.07
AND
ricohsp_212snwMatch-
Node
ricohsp_212sfnw_firmwareRange<1.08
AND
ricohsp_212sfnwMatch-
Node
ricohsp_212sfw_firmwareRange<1.08
AND
ricohsp_212sfwMatch-
Node
ricohsp_212sfnw_\(china\)_firmwareRange<1.08
AND
ricohsp_212sfnw_\(china\)Match-
Node
ricohsp_212suw_firmwareRange<1.07
AND
ricohsp_212suwMatch-
Node
ricohsp_213snw_firmwareRange<1.07
AND
ricohsp_213snwMatch-
Node
ricohsp_213snw_\(taiwan\)_firmwareRange<1.05
AND
ricohsp_213snw_\(taiwan\)Match-
Node
ricohsp_213suw_firmwareRange<1.07
AND
ricohsp_213suwMatch-
Node
ricohsp_213sfnw_firmwareRange<1.07
AND
ricohsp_213sfnwMatch-
Node
ricohsp_213sfw_firmwareRange<1.07
AND
ricohsp_213sfwMatch-
Node
ricohsp_213sfnw_\(taiwan\)_firmwareRange<1.06
AND
ricohsp_213sfnw_\(taiwan\)Match-
Node
ricohsp_212nw_firmwareRange<1.06
AND
ricohsp_212nwMatch-
Node
ricohsp_213nw_firmwareRange<1.06
AND
ricohsp_213nwMatch-
Node
ricohsp_213nw_\(taiwan\)_firmwareRange<1.04
AND
ricohsp_213nw_\(taiwan\)Match-
Node
ricohsp_212w_firmwareRange<1.06
AND
ricohsp_212wMatch-
Node
ricohsp_213w_firmwareRange<1.06
AND
ricohsp_213wMatch-

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.9%

Related for CVE-2019-14306