CVE-2019-14304
High
Description
Ricoh SP C250DN 1.06 devices allow CSRF.
SeverityHigh
CVSS8.8
Exploit probability—
ProductRicoh Sp C250sf Firmware
PublishedJan 10, 2020
First seenJan 10, 2020
How to fix
Update
- ricoh sp_c250sf_firmware1.15 or later
- ricoh sp_c252sf_firmware1.15 or later
- ricoh sp_c250dn_firmware1.09 or later
- ricoh sp_c252dn_firmware1.09 or later
- ricoh m_c250fw_firmware1.02 or later
- ricoh m_c250fwb_firmware1.02 or later
- ricoh p_c300w_firmware1.02 or later
- ricoh p_c301w_firmware1.02 or later
- ricoh sp_330sn_firmware1.07 or later
- ricoh sp_330sfn_firmware1.07 or later
- ricoh sp_330dn_firmware1.07 or later
- ricoh sp_3710sf_firmware1.07 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ricoh sp_c250sf_firmware | v < 1.15 | 1.15 |
| ricoh sp_c252sf_firmware | v < 1.15 | 1.15 |
| ricoh sp_c250dn_firmware | v < 1.09 | 1.09 |
| ricoh sp_c252dn_firmware | v < 1.09 | 1.09 |
| ricoh m_c250fw_firmware | v < 1.02 | 1.02 |
| ricoh m_c250fwb_firmware | v < 1.02 | 1.02 |
| ricoh p_c300w_firmware | v < 1.02 | 1.02 |
| ricoh p_c301w_firmware | v < 1.02 | 1.02 |
| ricoh sp_330sn_firmware | v < 1.07 | 1.07 |
| ricoh sp_330sfn_firmware | v < 1.07 | 1.07 |
| ricoh sp_330dn_firmware | v < 1.07 | 1.07 |
| ricoh sp_3710sf_firmware | v < 1.07 | 1.07 |
| ricoh sp_3710dn_firmware | v < 1.07 | 1.07 |
| ricoh sp_c260dnw_firmware | v < 1.12 | 1.12 |
| ricoh sp_c260sfnw_firmware | v < 1.15 | 1.15 |
| ricoh sp_c261dnw_firmware | v < 1.13 | 1.13 |
| ricoh sp_c261sfnw_firmware | v < 1.17 | 1.17 |
| ricoh sp_c262sfnw_firmware | v < 1.17 | 1.17 |
| ricoh sp_c262dnw_firmware | v < 1.13 | 1.13 |
| ricoh mp_2014_firmware | v < 1.10 | 1.10 |
| ricoh mp_2014d_firmware | v < 1.10 | 1.10 |
| ricoh mp_2014ad_firmware | v < 1.10 | 1.10 |
| ricoh m_2700_firmware | v < 1.06 | 1.06 |
| ricoh m_2701_firmware | v < 1.06 | 1.06 |
| ricoh sp_221s_firmware | v < 1.10 | 1.10 |
| ricoh sp_220snw_firmware | v < 1.11 | 1.11 |
| ricoh sp_221snw_firmware | v < 1.11 | 1.11 |
| ricoh sp_221sf_firmware | v < 1.11 | 1.11 |
| ricoh sp_220sfnw_firmware | v < 1.12 | 1.12 |
| ricoh sp_221sfnw_firmware | v < 1.12 | 1.12 |
| ricoh sp_277snwx_firmware | v < 1.12 | 1.12 |
| ricoh sp_277sfnwx_firmware | v < 1.12 | 1.12 |
| ricoh sp_221_firmware | v < 1.02 | 1.02 |
| ricoh sp_220nw_firmware | v < 1.04 | 1.04 |
| ricoh sp_221nw_firmware | v < 1.04 | 1.04 |
| ricoh sp277nwx_firmware | v < 1.04 | 1.04 |
| ricoh sp_212snw_firmware | v < 1.07 | 1.07 |
| ricoh sp_212sfnw_firmware | v < 1.08 | 1.08 |
| ricoh sp_212sfw_firmware | v < 1.08 | 1.08 |
| ricoh sp_212sfnw_\(china\)_firmware | v < 1.08 | 1.08 |
| ricoh sp_212suw_firmware | v < 1.07 | 1.07 |
| ricoh sp_213snw_firmware | v < 1.07 | 1.07 |
| ricoh sp_213snw_\(taiwan\)_firmware | v < 1.05 | 1.05 |
| ricoh sp_213suw_firmware | v < 1.07 | 1.07 |
| ricoh sp_213sfnw_firmware | v < 1.07 | 1.07 |
| ricoh sp_213sfw_firmware | v < 1.07 | 1.07 |
| ricoh sp_213sfnw_\(taiwan\)_firmware | v < 1.06 | 1.06 |
| ricoh sp_212nw_firmware | v < 1.06 | 1.06 |
| ricoh sp_213nw_firmware | v < 1.06 | 1.06 |
| ricoh sp_213nw_\(taiwan\)_firmware | v < 1.04 | 1.04 |
| ricoh sp_212w_firmware | v < 1.06 | 1.06 |
| ricoh sp_213w_firmware | v < 1.06 | 1.06 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.