688 matches found
PT-2024-4467 · Ricoh · Ricoh Streamline Nx Pc Client
Name of the Vulnerable Software and Affected Versions: Ricoh Streamline NX PC Client versions 3.6.x and earlier Description: The issue is related to an improper restriction of communication channel to intended endpoints, which may allow arbitrary code execution on the PC where the product is...
JVN#82749078: Multiple vulnerabilities in printers and scanners which implement BROTHER Web Based Management
Multiple printers and scanners which implement Web Based Management provided by BROTHER INDUSTRIES, LTD. contain multiple vulnerabilities listed below. Improper Authentication CWE-287 - CVE-2024-21824 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N| Base...
RICOH Aficio SP 4210N Cross-site Scripting (CVE-2022-37406)
Cross-site scripting vulnerability in Aficio SP 4210N firmware versions prior to Web Support 1.05 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...
RICOH Multiple Products Threat of Folder User Password Breach (CVE-2022-43969)
Ricoh is aware of the reported 'Threat of folder user password breach' CVE-2022-43969 that affects certain products and services that Ricoh develops, manufactures, and offers. The user password for the folder, that is saved to a device with data transmission functionality, may be breached via a...
RICOH SP C250 Series Buffer Overflow (CVE-2019-14308)
Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted requests to the LPD service. Affected firmware versions depend on the printer models. One affected configuration is...
RICOH Aficio MP 301 Cross-site Scripting (CVE-2018-17312)
On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi. This plugin only works with Tenable.ot. Please visit...
RICOH Multiple Products Exposure of Sensitive Information to an Unauthorized Actor (CVE-2019-14301)
Ricoh SP C250DN 1.06 devices have Incorrect Access Control issue 1 of 2. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid501978; scriptversion"1.4...
RICOH MP C4504ex Cross-site Scripting (CVE-2018-15884)
RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; ...
RICOH Multiple Products Debug Port Available (CVE-2019-14302)
On Ricoh SP C250DN 1.06 devices, a debug port can be used. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid501992; scriptversion"1.2";...
RICOH SP C250 Series Denial of Service (CVE-2019-14303)
Ricoh SP C250DN 1.05 devices allow denial of service issue 1 of 3. Some Ricoh printers were affected by a wrong LPD service implementation that lead to a denial of service vulnerability. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
RICOH SP C250 Series Buffer Overflow (CVE-2019-14307)
Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is...
RICOH SP 4510SF Cross-site Scripting (CVE-2018-17001)
On the RICOH SP 4510SF printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi. This plugin only works with Tenable.ot. Please visit...
RICOH SP C250/C252 Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2019-14300)
Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is...
RICOH MP C2003 Cross-site Scripting (CVE-2018-17315)
On the RICOH MP C2003 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi. This plugin only works with Tenable.ot. Please visit...
RICOH MP C6503 Cross-site Scripting (CVE-2018-17311)
On the RICOH MP C6503 Plus printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi. This plugin only works with Tenable.ot. Please visit...
RICOH SP C250 Series Use of Hard-coded Credentials (CVE-2019-14309)
Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders. This plugin only works with Tenable.ot. Please visit...
RICOH SP C250 Series Authentication Method Vulnerable to Brute Force Attacks (CVE-2019-14299)
Ricoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks. Some Ricoh printers did not implement account lockout. Therefore, it was possible to obtain the local account credentials by brute force. This plugin only works with Tenable.ot. Please visit...
RICOH Multiple Products Incorrect Access Control (CVE-2019-14306)
Ricoh SP C250DN 1.06 devices have Incorrect Access Control issue 2 of 2. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid501983; scriptversion"1.2...
RICOH SP 4520DN Cross-site Scripting (CVE-2019-11844)
An HTML Injection vulnerability has been discovered on the RICOH SP 4520DN via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn or entryDisplayNameIn parameter. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
RICOH Aficio MP 305+ Cross-site Scripting (CVE-2018-17314)
On the RICOH Aficio MP 305+ printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi. This plugin only works with Tenable.ot. Please visit...