CVE-2022-37406

2022-12-0700:00:00

jpcert

www.cve.org

cross-site scripting

aficio sp 4210n

firmware vulnerability

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.4%

JSON

Cross-site scripting vulnerability in Aficio SP 4210N firmware versions prior to Web Support 1.05 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

CNA Affected

[
  {
    "vendor": "RICOH COMPANY, LTD.",
    "product": "Aficio SP 4210N",
    "versions": [
      {
        "version": "firmware versions prior to Web Support 1.05",
        "status": "affected"
      }
    ]
  }
]