CVE-2019-14308

Vulnerability

Several Ricoh printers and Multifunction Printers (MFPs) contain a buffer overflow vulnerability in the parsing of LPD packets (CWE-119), tracked as CVE-2019-14308. The affected firmware versions depend on the printer model; for example, the Ricoh SP C250dn firmware up to version 1.06 and the Ricoh SP C250sf firmware up to version 1.12 are vulnerable [1]. The flaw is triggered when the device processes a specially crafted LPD packet [1].

Exploitation

An attacker can exploit this vulnerability remotely over the network without requiring any authentication [1]. The only prerequisite is that the target printer's LPD service is accessible. By sending a crafted LPD packet, the attacker can trigger a buffer overflow [1].

Impact

Successful exploitation of this buffer overflow can allow a remote attacker to cause a denial-of-service (DoS) condition or to execute arbitrary code on the affected device [1]. The CVSS v3 base score is 9.8, indicating critical severity [1].

Mitigation

Ricoh has released firmware updates to address this vulnerability [1]. Users should apply the appropriate firmware update according to the information provided by the developer [1]. As of the publication date, no workaround has been publicly disclosed [1].