CVE-2022-43969
Critical
Description
Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.
SeverityCritical
CVSS9.1
Exploit probability—
ProductRicoh Mp C307 Firmware
PublishedFeb 16, 2023
First seenFeb 16, 2023
Weakness typeCWE-522CWE-522
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ricoh mp_c307_firmware | v ≤ 1.14 | — |
| ricoh mp_c407_firmware | v ≤ 1.14 | — |
| ricoh mp_c406_firmware | v ≤ 1.20 | — |
| ricoh mp_c306_firmware | v ≤ 1.20 | — |
| ricoh im_cw2200_firmware | v ≤ 1.01 | — |
| ricoh im_cw2201_firmware | v ≤ 1.11 | — |
| ricoh mp_402spf_firmware | v ≤ 1.12 | — |
| ricoh mp_c2003_smart_operation_panel_firmware | v ≤ 1.14 | — |
| ricoh mp_c2503_smart_operation_panel_firmware | v ≤ 1.14 | — |
| ricoh mp_c2003_firmware | v ≤ 1.17 | — |
| ricoh mp_c2503_firmware | v ≤ 1.17 | — |
| ricoh mp_c4503_firmware | v ≤ 1.12 | — |
| ricoh mp_c5503_firmware | v ≤ 1.12 | — |
| ricoh mp_c6003_firmware | v ≤ 1.12 | — |
| ricoh mp_c3003_firmware | v ≤ 1.19 | — |
| ricoh mp_c3503_firmware | v ≤ 1.19 | — |
| ricoh mp_c4503_smart_operation_panel_firmware | v ≤ 2.17 | — |
| ricoh mp_c5503_smart_operation_panel_firmware | v ≤ 2.17 | — |
| ricoh mp_c6003_smart_operation_panel_firmware | v ≤ 2.17 | — |
| ricoh mp_c3003_smart_operation_panel_firmware | v ≤ 2.15 | — |
| ricoh mp_c3503_smart_operation_panel_firmware | v ≤ 2.15 | — |
| ricoh mp_c2004ex_firmware | v ≤ 1.15 | — |
| ricoh mp_c2504ex_firmware | v ≤ 1.15 | — |
| ricoh mp_c4504ex_firmware | v ≤ 1.15 | — |
| ricoh mp_c5504ex_firmware | v ≤ 1.15 | — |
| ricoh mp_c6004ex_firmware | v ≤ 1.15 | — |
| ricoh mp_c3004ex_firmware | v ≤ 1.15 | — |
| ricoh mp_c3504ex_firmware | v ≤ 1.15 | — |
| ricoh pro_c5300s_firmware | v ≤ 1.07 | — |
| ricoh pro_c5310s_firmware | v ≤ 1.07 | — |
| ricoh m_c2001_firmware | v ≤ 1.01 | — |
| ricoh im_c530f_firmware | v ≤ 6.17 | — |
| ricoh im_c530fb_firmware | v ≤ 6.17 | — |
| ricoh im_350f_firmware | v ≤ 1.10 | — |
| ricoh im_350_firmware | v ≤ 1.10 | — |
| ricoh im_430f_firmware | v ≤ 1.10 | — |
| ricoh im_430fb_firmware | v ≤ 1.10 | — |
| ricoh mp_305\+_firmware | v ≤ 1.12 | — |
| ricoh im_550f_firmware | v ≤ 5.02 | — |
| ricoh im_600f_firmware | v ≤ 5.02 | — |
| ricoh im_600srf_firmware | v ≤ 5.02 | — |
| ricoh im_7000_firmware | v ≤ 2.02 | — |
| ricoh im_8000_firmware | v ≤ 2.02 | — |
| ricoh im_9000_firmware | v ≤ 2.02 | — |
| ricoh mp_2555_firmware | v ≤ 1.18 | — |
| ricoh mp_3055_firmware | v ≤ 1.18 | — |
| ricoh mp_3555_firmware | v ≤ 1.18 | — |
| ricoh mp_4055_firmware | v ≤ 1.18 | — |
| ricoh mp_5055_firmware | v ≤ 1.18 | — |
| ricoh mp_6055_firmware | v ≤ 1.18 | — |
| ricoh im_2500_firmware | v ≤ 4.02 | — |
| ricoh im_3000_firmware | v ≤ 4.02 | — |
| ricoh im_3500_firmware | v ≤ 4.02 | — |
| ricoh im_4000_firmware | v ≤ 4.02 | — |
| ricoh im_5000_firmware | v ≤ 4.02 | — |
| ricoh im_6000_firmware | v ≤ 4.02 | — |
| ricoh im_2702_firmware | v ≤ 1.12 | — |
| ricoh im_c400f_firmware | v ≤ 5.03 | — |
| ricoh im_c300f_firmware | v ≤ 5.03 | — |
| ricoh im_c300_firmware | v ≤ 5.03 | — |
| ricoh im_c400srf_firmware | v ≤ 5.03 | — |
| ricoh im_c2000_firmware | v ≤ 6.03 | — |
| ricoh im_c2500_firmware | v ≤ 6.03 | — |
| ricoh im_c6000_firmware | v ≤ 6.03 | — |
| ricoh im_c5500_firmware | v ≤ 6.03 | — |
| ricoh im_c3000_firmware | v ≤ 6.03 | — |
| ricoh im_c3500_firmware | v ≤ 6.03 | — |
| ricoh im_c4500_firmware | v ≤ 6.03 | — |
| ricoh mp_c2504_firmware | v ≤ 1.21 | — |
| ricoh mp_c2004_firmware | v ≤ 1.21 | — |
| ricoh mp_c4504_firmware | v ≤ 1.22 | — |
| ricoh mp_c5504_firmware | v ≤ 1.22 | — |
| ricoh mp_c6004_firmware | v ≤ 1.22 | — |
| ricoh mp_c3504_firmware | v ≤ 1.21 | — |
| ricoh mp_c3004_firmware | v ≤ 1.21 | — |
| ricoh im_c6500_firmware | v ≤ 4.0 | — |
| ricoh im_c8000_firmware | v ≤ 4.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.