CVE-2024-41995

The Ricoh JavaTM Platform (Ver. 12.89 and earlier) is vulnerable to an insecure default initialization during firmware updates. When updating from affected versions, the TLS configuration is automatically reset to enable TLS 1.0 and TLS 1.1 (CWE-1188), potentially exposing the product to known vu...

JVN#78728294: Firmware update for RICOH JavaTM Platform resets the TLS configuration

JavaTM Platform provided by Ricoh Company, Ltd. is the execution environment for firmware extensions of Ricoh MFPs and printers, providing TLS Transport Layer Security communication mechanism. When the firmware for JavaTM Platform is updated from Ver.12.89 or earlier versions to a newer version,...

CVE-2024-39927

Out-of-bounds write vulnerability exists in Ricoh MFPs and printers. If a remote attacker sends a specially crafted request to the affected products, the products may be able to cause a denial-of-service DoS condition and/or user's data may be destroyed...

CVE-2024-39927

Out-of-bounds write vulnerability exists in Ricoh MFPs and printers. If a remote attacker sends a specially crafted request to the affected products, the products may be able to cause a denial-of-service DoS condition and/or user's data may be destroyed...

CVE-2024-39927

Ricoh MFPs and printers are vulnerable to an out-of-bounds write (CWE-787) vulnerability. A remote attacker sending a specially crafted request can trigger a denial-of-service (DoS) condition or cause user data destruction . Exploitation details are not provided, though one source notes that arbi...

CVE-2024-39927

Out-of-bounds write vulnerability exists in Ricoh MFPs and printers. If a remote attacker sends a specially crafted request to the affected products, the products may be able to cause a denial-of-service DoS condition and/or user's data may be destroyed...

JVN#14294633: Out-of-bounds write vulnerability in Ricoh MFPs and printers

MFPs and printers provided by Ricoh Company, Ltd. contain an out-of-bounds write vulnerability CWE-787. Impact If a remote attacker sends a specially crafted request to the affected products, the products may be able to cause a denial-of-service DoS condition and/or user's data may be destroyed...

Toshiba Multi-Function Printers 40 Vulnerabilities

Hello, Please find a text-only version below sent to security mailing lists. The complete version on "40 vulnerabilities in Toshiba Multi-Function Printers" is posted here: https://pierrekim.github.io/blog/2024-06-27-toshiba-mfp-40-vulnerabilities.html The text version is also posted here:...

Sharp MFP Security Vulnerability

Sharp MFP is a series of multifunction printers from Sharp Japan. A security vulnerability exists in Sharp MFP that originates from storing sensitive information in plaintext in resources that may be accessed by other spheres of control...

CVE-2023-46327

Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encrypti...

CVE-2023-46327

Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. With the knowledge of the encryption process and the encrypti...

CVE-2023-46327

CVE-2023-46327 affects FUJIFILM Business Innovation Corp. and Xerox multifunction printers that export Address Book data with encrypted form but weak encryption. The connected sources confirm the root issue is insufficient encryption strength, enabling an attacker with knowledge of the encryption...

CVE-2023-29984

Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service DoS condition. As for the affected products/models/versions, see the detailed...

Null pointer dereference

Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service DoS condition. As for the affected products/models/versions, see the detailed...

CVE-2023-29984

Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service DoS condition. As for the affected products/models/versions, see the detailed...

CVE-2023-29984

Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted request may lead an affected product to a denial-of-service DoS condition. As for the affected products/models/versions, see the detailed...

CVE-2023-29984

The CVE-2023-29984 issue is a NULL POINTER DEREFERENCE affecting multiple Brother and Fuji Xerox/Fujifilm MFPs/printers that implement the Debut web server (versions 1.2–1.3). Processing a specially crafted request can cause a Denial-of-Service (DoS). Affected products/versions are vendor-specifi...

CVE-2023-1329

A potential security vulnerability has been identified for certain HP multifunction printers MFPs. The vulnerability may lead to Buffer Overflow and/or Remote Code Execution when running HP Workpath solutions on potentially affected products...

CVE-2023-1329

CVE-2023-1329 affects certain HP multifunction printers (MFPs) when HP Workpath solutions are active. The issue is described as a buffer overflow that may enable remote code execution via network access, with high severity (CVSSv3.1: 9.8, C/H/I/A). Affected components are minimal in the public te...

SHARP Printer Command Injection Vulnerability (Dec 2022)

Multiple SHARP printers are prone to a command injection vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...