Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).
Priority LOW 36Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).
Why it matters now
EPSS 0.01409 72nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 96
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:ricoh:sp_c250sf_firmware:*:*:*:*:*:*:*:* | before 1.15 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_c250sf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_c252sf_firmware:*:*:*:*:*:*:*:* | before 1.15 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_c252sf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_c250dn_firmware:*:*:*:*:*:*:*:* | before 1.09 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_c250dn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_c252dn_firmware:*:*:*:*:*:*:*:* | before 1.09 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_c252dn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_330sn_firmware:*:*:*:*:*:*:*:* | before 1.07 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_330sn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
- cpe:2.3:o:ricoh:sp_c250sf_firmware:*:*:*:*:*:*:*:* Versions before 1.15 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_c250sf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_c252sf_firmware:*:*:*:*:*:*:*:* Versions before 1.15 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_c252sf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_c250dn_firmware:*:*:*:*:*:*:*:* Versions before 1.09 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_c250dn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_c252dn_firmware:*:*:*:*:*:*:*:* Versions before 1.09 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_c252dn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_330sn_firmware:*:*:*:*:*:*:*:* Versions before 1.07 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_330sn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
Show 86 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:ricoh:sp_330sfn_firmware:*:*:*:*:*:*:*:* | before 1.07 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_330sfn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_330dn_firmware:*:*:*:*:*:*:*:* | before 1.07 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_330dn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_3710sf_firmware:*:*:*:*:*:*:*:* | before 1.07 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_3710sf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_3710dn_firmware:*:*:*:*:*:*:*:* | before 1.07 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_3710dn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_c260dnw_firmware:*:*:*:*:*:*:*:* | before 1.12 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_c260dnw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_c260sfnw_firmware:*:*:*:*:*:*:*:* | before 1.15 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_c260sfnw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_c261dnw_firmware:*:*:*:*:*:*:*:* | before 1.13 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_c261dnw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_c261sfnw_firmware:*:*:*:*:*:*:*:* | before 1.17 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_c261sfnw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_c262sfnw_firmware:*:*:*:*:*:*:*:* | before 1.17 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_c262sfnw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_c262dnw_firmware:*:*:*:*:*:*:*:* | before 1.13 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_c262dnw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:mp_2014_firmware:*:*:*:*:*:*:*:* | before 1.10 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:mp_2014:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:mp_2014d_firmware:*:*:*:*:*:*:*:* | before 1.10 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:mp_2014d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:mp_2014ad_firmware:*:*:*:*:*:*:*:* | before 1.10 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:mp_2014ad:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:m_2700_firmware:*:*:*:*:*:*:*:* | before 1.06 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:m_2700:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:m_2701_firmware:*:*:*:*:*:*:*:* | before 1.06 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:m_2701:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_221s_firmware:*:*:*:*:*:*:*:* | before 1.10 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_221s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_220snw_firmware:*:*:*:*:*:*:*:* | before 1.11 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_220snw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_221snw_firmware:*:*:*:*:*:*:*:* | before 1.11 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_221snw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_221sf_firmware:*:*:*:*:*:*:*:* | before 1.11 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_221sf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_220sfnw_firmware:*:*:*:*:*:*:*:* | before 1.12 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_220sfnw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_221sfnw_firmware:*:*:*:*:*:*:*:* | before 1.12 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_221sfnw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_277snwx_firmware:*:*:*:*:*:*:*:* | before 1.12 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_277snwx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_277sfnwx_firmware:*:*:*:*:*:*:*:* | before 1.12 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_277sfnwx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_221_firmware:*:*:*:*:*:*:*:* | before 1.02 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_221:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_220nw_firmware:*:*:*:*:*:*:*:* | before 1.04 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_220nw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_221nw_firmware:*:*:*:*:*:*:*:* | before 1.04 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_221nw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp277nwx_firmware:*:*:*:*:*:*:*:* | before 1.04 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp277nwx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_212snw_firmware:*:*:*:*:*:*:*:* | before 1.07 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_212snw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_212sfnw_firmware:*:*:*:*:*:*:*:* | before 1.08 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_212sfnw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_212sfw_firmware:*:*:*:*:*:*:*:* | before 1.08 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_212sfw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_212sfnw_\(china\)_firmware:*:*:*:*:*:*:*:* | before 1.08 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_212sfnw_\(china\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_212suw_firmware:*:*:*:*:*:*:*:* | before 1.07 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_212suw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_213snw_firmware:*:*:*:*:*:*:*:* | before 1.07 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_213snw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_213snw_\(taiwan\)_firmware:*:*:*:*:*:*:*:* | before 1.05 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_213snw_\(taiwan\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_213suw_firmware:*:*:*:*:*:*:*:* | before 1.07 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_213suw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_213sfnw_firmware:*:*:*:*:*:*:*:* | before 1.07 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_213sfnw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_213sfw_firmware:*:*:*:*:*:*:*:* | before 1.07 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_213sfw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_213sfnw_\(taiwan\)_firmware:*:*:*:*:*:*:*:* | before 1.06 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_213sfnw_\(taiwan\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_212nw_firmware:*:*:*:*:*:*:*:* | before 1.06 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_212nw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_213nw_firmware:*:*:*:*:*:*:*:* | before 1.06 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_213nw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_213nw_\(taiwan\)_firmware:*:*:*:*:*:*:*:* | before 1.04 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_213nw_\(taiwan\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_212w_firmware:*:*:*:*:*:*:*:* | before 1.06 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_212w:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
| cpe:2.3:o:ricoh:sp_213w_firmware:*:*:*:*:*:*:*:* | before 1.06 | Vulnerable | Ricoh Company, Ltd. |
| cpe:2.3:h:ricoh:sp_213w:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Ricoh Company, Ltd. |
- cpe:2.3:o:ricoh:sp_330sfn_firmware:*:*:*:*:*:*:*:* Versions before 1.07 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_330sfn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_330dn_firmware:*:*:*:*:*:*:*:* Versions before 1.07 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_330dn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_3710sf_firmware:*:*:*:*:*:*:*:* Versions before 1.07 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_3710sf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_3710dn_firmware:*:*:*:*:*:*:*:* Versions before 1.07 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_3710dn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_c260dnw_firmware:*:*:*:*:*:*:*:* Versions before 1.12 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_c260dnw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_c260sfnw_firmware:*:*:*:*:*:*:*:* Versions before 1.15 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_c260sfnw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_c261dnw_firmware:*:*:*:*:*:*:*:* Versions before 1.13 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_c261dnw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_c261sfnw_firmware:*:*:*:*:*:*:*:* Versions before 1.17 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_c261sfnw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_c262sfnw_firmware:*:*:*:*:*:*:*:* Versions before 1.17 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_c262sfnw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_c262dnw_firmware:*:*:*:*:*:*:*:* Versions before 1.13 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_c262dnw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:mp_2014_firmware:*:*:*:*:*:*:*:* Versions before 1.10 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:mp_2014:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:mp_2014d_firmware:*:*:*:*:*:*:*:* Versions before 1.10 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:mp_2014d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:mp_2014ad_firmware:*:*:*:*:*:*:*:* Versions before 1.10 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:mp_2014ad:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:m_2700_firmware:*:*:*:*:*:*:*:* Versions before 1.06 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:m_2700:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:m_2701_firmware:*:*:*:*:*:*:*:* Versions before 1.06 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:m_2701:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_221s_firmware:*:*:*:*:*:*:*:* Versions before 1.10 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_221s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_220snw_firmware:*:*:*:*:*:*:*:* Versions before 1.11 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_220snw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_221snw_firmware:*:*:*:*:*:*:*:* Versions before 1.11 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_221snw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_221sf_firmware:*:*:*:*:*:*:*:* Versions before 1.11 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_221sf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_220sfnw_firmware:*:*:*:*:*:*:*:* Versions before 1.12 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_220sfnw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_221sfnw_firmware:*:*:*:*:*:*:*:* Versions before 1.12 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_221sfnw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_277snwx_firmware:*:*:*:*:*:*:*:* Versions before 1.12 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_277snwx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_277sfnwx_firmware:*:*:*:*:*:*:*:* Versions before 1.12 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_277sfnwx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_221_firmware:*:*:*:*:*:*:*:* Versions before 1.02 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_221:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_220nw_firmware:*:*:*:*:*:*:*:* Versions before 1.04 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_220nw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_221nw_firmware:*:*:*:*:*:*:*:* Versions before 1.04 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_221nw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp277nwx_firmware:*:*:*:*:*:*:*:* Versions before 1.04 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp277nwx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_212snw_firmware:*:*:*:*:*:*:*:* Versions before 1.07 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_212snw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_212sfnw_firmware:*:*:*:*:*:*:*:* Versions before 1.08 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_212sfnw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_212sfw_firmware:*:*:*:*:*:*:*:* Versions before 1.08 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_212sfw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_212sfnw_\(china\)_firmware:*:*:*:*:*:*:*:* Versions before 1.08 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_212sfnw_\(china\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_212suw_firmware:*:*:*:*:*:*:*:* Versions before 1.07 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_212suw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_213snw_firmware:*:*:*:*:*:*:*:* Versions before 1.07 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_213snw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_213snw_\(taiwan\)_firmware:*:*:*:*:*:*:*:* Versions before 1.05 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_213snw_\(taiwan\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_213suw_firmware:*:*:*:*:*:*:*:* Versions before 1.07 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_213suw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_213sfnw_firmware:*:*:*:*:*:*:*:* Versions before 1.07 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_213sfnw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_213sfw_firmware:*:*:*:*:*:*:*:* Versions before 1.07 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_213sfw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_213sfnw_\(taiwan\)_firmware:*:*:*:*:*:*:*:* Versions before 1.06 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_213sfnw_\(taiwan\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_212nw_firmware:*:*:*:*:*:*:*:* Versions before 1.06 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_212nw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_213nw_firmware:*:*:*:*:*:*:*:* Versions before 1.06 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_213nw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_213nw_\(taiwan\)_firmware:*:*:*:*:*:*:*:* Versions before 1.04 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_213nw_\(taiwan\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_212w_firmware:*:*:*:*:*:*:*:* Versions before 1.06 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_212w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
- cpe:2.3:o:ricoh:sp_213w_firmware:*:*:*:*:*:*:*:* Versions before 1.06 Vulnerable ·Ricoh Company, Ltd.
- cpe:2.3:h:ricoh:sp_213w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ricoh Company, Ltd.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-14306
- 2026-10-03 Alias added: GHSA-56r2-8xcx-j968
References
More Ricoh Company, Ltd. M 2700 Firmware vulnerabilities
- TI-2021-13231 RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP… CVSS 3.1CRITICAL 9.8
- TI-2019-10657 Ricoh SP C250DN 1.06 devices allow CSRF. CVSS 3.1HIGH 8.8
- TI-2019-10654 Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2). CVSS 3.1HIGH 7.5
- TI-2019-10655 On Ricoh SP C250DN 1.06 devices, a debug port can be used. CVSS 3.1MEDIUM 6.8
Sources
- CVE-2019-14306 · CVE Program
- CVE-2019-14306 · NVD
- FIRST EPSS
- GHSA-56r2-8xcx-j968 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences