CVE-2019-14302

Affected product: Ricoh SP C250DN 1.06. Vulnerability: Debug port accessible on the device allows exploitation. Root cause: presence of an unprotected debug interface. Impact: With physical access, an attacker may execute arbitrary code, alter settings, or disable functions, and may access sensit...

CVE-2019-14304

The CVE-2019-14304 entry concerns Ricoh SP C250DN 1.06 devices with a Cross-site Request Forgery (CSRF) vulnerability in the device’s web interface. The issue is described as CSRF allowing unintended operations to be performed when a user visits a crafted page; multiple sources (NVD, Red Hat advi...

CVE-2019-14301

Ricoh SP C250DN 1.06 devices are affected by CVE-2019-14301: Incorrect Access Control (Information Disclosure). The vulnerability is documented with a CVSS v3 base score of 7.5 (Network, Low attack complexity, No privileges required, User interaction not required; Confidentiality impact High). Pu...

CVE-2019-14306

CVE-2019-14306 affects Ricoh SP C250DN (firmware 1.06) with an Incorrect Access Control issue. Connected sources corroborate that the vulnerability concerns access control on Ricoh printers, with multiple advisories (JVN/CVE listings, Red Hat entry, CNVD) referencing Ricoh SP C250DN 1.06 and rela...