Design/Logic Flaw

2019-01-0923:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.1%

JSON

The RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the display versions with RICOH Interactive Whiteboard Controller Type1 V1.3 to V2.2 attached (D5520, D6500, D6510, D7500, D8400), and the display versions with RICOH Interactive Whiteboard Controller Type2 V3.0 to V3.1.10137.0 attached (D5520, D6510, D7500, D8400) does not verify its server certificates, which allows man-in-the-middle attackers to eversdrop on encrypted communication.

CPENameOperatorVersion
d2200_firmwarege1.3
d2200_firmwarele2.2
d5500_firmwarege1.3
d5500_firmwarele2.2
d5510_firmwarege1.3
d5510_firmwarele2.2
d5520_firmwarege1.3
d5520_firmwarele2.2
d5520_firmwarege3.0
d5520_firmwarele3.1.10137.0

Name	Operator	Version
d2200_firmware	ge	1.3
d2200_firmware	le	2.2
d5500_firmware	ge	1.3
d5500_firmware	le	2.2
d5510_firmware	ge	1.3
d5510_firmware	le	2.2
d5520_firmware	ge	1.3
d5520_firmware	le	2.2
d5520_firmware	ge	3.0
d5520_firmware	le	3.1.10137.0