CVE-2019-14299

Vulnerability

The Ricoh SP C250DN printer firmware version 1.05 does not implement account lockout after multiple failed authentication attempts, leaving the device susceptible to brute force attacks [1]. This affects the administrative interface and any other locally authenticated services.

Exploitation

An attacker with network access to the printer's management interface can perform repeated login attempts using common or guessed passwords. Because no lockout mechanism is enforced, the attacker can try unlimited passwords until the correct one is found [1]. No user interaction or prior authentication is required.

Impact

Successful brute force allows the attacker to obtain local administrative credentials, granting full control over the printer configuration, stored documents, and network access [1]. This can lead to unauthorized disclosure of sensitive information printed, scanned, or stored on the device.

Mitigation

As of the publication date, Ricoh has not released a firmware update addressing this issue in the referenced support page [1]. Users should regularly check Ricoh's support site for updates, restrict network access to the printer's management interface via firewalls or VLANs, and use complex, non-default passwords.