CVE-2024-47939

Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service D...

CVE-2024-47939

CVE-2024-47939 affects Ricoh Web Image Monitor on multiple Ricoh laser printers/MFPs. The issue is a stack-based buffer overflow caused by improper parsing of HTTP requests, potentially allowing arbitrary code execution and DoS when a specially crafted request is sent. Public sources in connected...

CVE-2024-47939

Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service D...

CVE-2024-47939: Stack-based Buffer Overflow

Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service D...

Stack-based buffer overflow vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor

Overview Web Image Monitor provided by Ricoh Company, Ltd. is an web server included and runs in laser printers and MFPs multifunction printers. Web Image Monitor contains a stack-based buffer overflow vulnerability CWE-121 due to inappropriate parsing process of HTTP request. Zhihong Tian, Hui L...

PT-2024-7555

Name of the Vulnerable Software and Affected Versions Ricoh printers and MFPs affected versions not specified Description A stack-based buffer overflow vulnerability exists in Ricoh laser printers and MFPs that implement Web Image Monitor. This issue is related to reading data beyond the buffer...

JVN#87770340: Stack-based buffer overflow vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor

Web Image Monitor provided by Ricoh Company, Ltd. is an web server included and runs in laser printers and MFPs multifunction printers. Web Image Monitor contains a stack-based buffer overflow vulnerability CWE-121 due to inappropriate parsing process of HTTP request. Impact Receiving a specially...

RICOH Aficio SP 4210N vulnerable to cross-site scripting

Overview Aficio SP 4210N provided by RICOH COMPANY, LTD. contains a cross-site scripting vulnerability CWE-79 in Web Image Monitor. Yudai Morii, Takaya Noma, Hiroki Yasui, Takayuki Sasaki and Katsunari Yoshioka of Yokohama National University reported this vulnerability to IPA. JPCERT/CC...

JVN#24659622: RICOH Aficio SP 4210N vulnerable to cross-site scripting

Aficio SP 4210N provided by RICOH COMPANY, LTD. contains a cross-site scripting vulnerability CWE-79 in Web Image Monitor. Impact An arbitrary script may be executed on the web browser of the user who is logging in to the product with the administrative privilege. Solution Update the firmware...

Vulnerability fixed in RICOH Aficio SP 4210N

A vulnerability has been fixed in RICOH Aficio SP 4210N. The vulnerability allows a remote malicious person to perform a Cross-Site Scripting attack. To exploit this vulnerability exploitation requires access to the Web Image Monitor. RICOH has released updates to fix the vulnerability. More...

RICOH Web Image Monitor 1.09 - HTML Injection Vulnerability

Exploit for hardware platform in category web applications Exploit Title: RICOH Web Image Monitor 1.09 - HTML Injection Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support-download.com/services/device/webhlp/nb/gen/v140cc1/en/ptop010.html Software...

RICOH Web Image Monitor 1.09 - HTML Injection

RICOH Web Image Monitor 1.09 - HTML Injection Exploit Title: RICOH Web Image Monitor 1.09 - HTML Injection Date: 2019-05-06 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support-download.com/services/device/webhlp/nb/gen/v140cc1/en/ptop010.html...

RICOH Web Image Monitor 1.09 - HTML Injection

Exploit Title: RICOH Web Image Monitor 1.09 - HTML Injection Date: 2019-05-06 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support-download.com/services/device/webhlp/nb/gen/v140cc1/en/ptop010.html Software: RICOH Web Image Monitor Product Version:...

RICOH Web Image Monitor 1.09 HTML Injection

Exploit Title: RICOH Web Image Monitor 1.09 - HTML Injection Date: 2019-05-06 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.ricoh.com/ Hardware Link: http://support-download.com/services/device/webhlp/nb/gen/v140cc1/en/ptop010.html Software: RICOH Web Image Monitor Product Version:...

Ricoh Printer Detection

The remote host is a Ricoh Printer. C Tenable, Inc. include'compat.inc'; if description scriptid50577; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/11/26"; scriptnameenglish:"Ricoh Printer Detection"; scriptsetattributeattribute:"synopsis", value: "The...

Ricoh Aficio Web Image Monitor 2.03 Cross Site Scripting

I was poking at some Ricoh MFPs several days ago, when I found this. It is nothing to get to terribly excited about as it's just a reflected XSS. However, the ability to abuse any trusted internal IP should be considered a threat. Companies have taken big hits from less. So without further ado,...

Ricoh Web Image Monitor 2.03 - Cross-Site Scripting

Ricoh Web Image Monitor 2.03 - Cross-Site Scripting source: https://www.securityfocus.com/bid/44772/info Ricoh web image monitor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Ricoh Web Image Monitor 2.03 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/44772/info Ricoh web image monitor is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...