CVE-2019-14300

Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or code execution via…

Critical · published August 26, 2019

CVSS v3.0
9.8
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

🔥 Buffer overflows in Ricoh printers could turn your office into a digital ghost town! Think of these printers as a restaurant kitchen that becomes overwhelmed by orders—it can't handle the requests, leading to a total shutdown. In this case, a crafty request could overflow the system, causing chaos instead of printing. 🍽️ An attacker could potentially send specially crafted requests to the web server, resulting in a denial of service or even remote code execution. This means they could crash your printer or worse—execute malicious code, jeopardizing the security of your network! Absolutely devastating for any office relying on these machines.

Put simply

Think of these printers as a restaurant kitchen that becomes overwhelmed by orders—it can't handle the requests, leading to a total shutdown. In this case, a crafty request could overflow the system, causing chaos instead of printing. 🍽️ This vulnerability allows for multiple buffer overflows when parsing HTTP cookie headers. Specifically, the flawed handling of oversized headers can lead to unexpected behavior, ranging from service interruptions to unauthorized code execution.

What to do

An attacker could potentially send specially crafted requests to the web server, resulting in a denial of service or even remote code execution. This means they could crash your printer or worse—execute malicious code, jeopardizing the security of your network! Absolutely devastating for any office relying on these machines. Update your Ricoh printer to the latest firmware, specifically versions beyond 1.06 for the SP C250DN and SP C252DN, and beyond 1.12 for the SP C250SF and SP C252SF. Make sure to review all configurations to ensure they are secure and compliant. You've got this! Apply these fixes, and your printers will be back to reliably printing without fear. 🛡️

The record
Technical detail
CVSS v3.0
9.8 · CRITICAL
Vector
CVSS:3.0/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.03120 · 87.7th percentile
Published
2019-08-26T14:22Z
EPSS history
Timeline
  • 26 AUG 14:22Z
    Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or code execution via…
    cvelistv5