CVE-2019-14305

Vulnerability

The vulnerability is a buffer overflow (CWE-119) in the HTTP parameter parsing for Wi-Fi, mDNS, POP3, SMTP, and alert notification settings on the web server of multiple Ricoh printers and MFPs. The affected firmware versions vary by model, e.g., SP C250DN firmware up to and including version 1.06, and SP C250SF firmware up to and including version 1.12. A wide range of Ricoh products are affected. The issue is identified as CVE-2019-14305 [1].

Exploitation

An attacker can exploit this vulnerability remotely over a network without authentication or user interaction. The attacker sends a crafted HTTP request with a malicious parameter to the web server of an affected device. The buffer overflow occurs during the parsing of this parameter, which can corrupt memory. No special network position is required beyond network access to the printer's web interface [1].

Impact

Successful exploitation can lead to denial of service (DoS) or arbitrary code execution on the device. An attacker gaining code execution could potentially achieve full compromise of the printer, with high impacts on confidentiality, integrity, and availability. The CVSS v3 base score is 9.8 (Critical) [1].

Mitigation

The vendor recommends updating the device firmware to the latest version provided by Ricoh. The solution is to apply the appropriate firmware update according to the information provided by the developer on the Ricoh support site [1] [2]. Users should check the Ricoh support and downloads page for their specific model to obtain the fix. No workarounds are described in the available references, and the devices are not listed on the CISA Known Exploited Vulnerabilities (KEV) catalog as of the last update.