TI-2024-32182 Aliases CVE-2024-47939 GHSA-589r-q985-q5r6

Stack-based buffer overflow in Ricoh Company, Ltd. Multiple laser printers and MFPs which…

MEDIUM 43CWE-121Published 2024-11-01 · Updated 2025-05-21

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: Code execution
Confidentiality · integrity · availability: High · High · Low
Fix status: No fix listed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00698 53rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Ricoh Company, Ltd.	Multiple laser printers and MFPs which implement Web Image Monitor	see the information provided by the vendor	—	No fix listed	CNA
Konica Minolta, Inc.	Multiple MFPs which implement Web Image Monitor	see the information provided by the vendor	—	No fix listed	CNA

Multiple laser printers and MFPs which implement Web Image Monitor VendorRicoh Company, Ltd. Affected see the information provided by the vendor Fixed in — No fix listed CNA
Multiple MFPs which implement Web Image Monitor VendorKonica Minolta, Inc. Affected see the information provided by the vendor Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2024-47939
2026-10-03 Alias added: GHSA-589r-q985-q5r6

References

Other 4

TI-2024-34873 Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple… CVSS 3.1HIGH 7.5
TI-2024-34872 Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple… CVSS 3.1HIGH 7.5
TI-2024-34869 Stack-based buffer overflow in Brother Industries, Ltd HL-L8260CDN CVSS 3.1HIGH 7.2
TI-2026-65073 Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service CVSS 4.0HIGH 7.1
TI-2024-34874 Insufficiently protected credentials in Brother Industries, Ltd HL-L8260CDN CVSS 3.1MEDIUM 6.8
TI-2024-34871 Server-side request forgery in Brother Industries, Ltd HL-L8260CDN CVSS 3.1MEDIUM 5.3

See all 74 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences