CVE-2019-14310

Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3)

published March 13, 2020

CVSS
—
EPSS
2%
Percentile
79.8
In the wild
Unconfirmed
What it is

⚠️ A crafty packet could send your Ricoh SP C250DN printer into a tailspin! Unauthenticated requests to its IPP service can crash the device without breaking a sweat. 🔥 Think of it like a restaurant waiter accepting an order without checking if the kitchen is even open — one wrong move and the whole place goes down! If exploited, an attacker could trigger a denial of service, leaving your printer unresponsive and causing chaos in your print queue. It’s like being stuck in a traffic jam on the way to a big meeting!

Put simply

Think of it like a restaurant waiter accepting an order without checking if the kitchen is even open — one wrong move and the whole place goes down! This vulnerability stems from a memory corruption issue in how the Ricoh SP C250DN devices handle IPP packets, allowing unauthenticated malicious packets to crash the device.

What to do

If exploited, an attacker could trigger a denial of service, leaving your printer unresponsive and causing chaos in your print queue. It’s like being stuck in a traffic jam on the way to a big meeting! To protect your device, ensure it's running the latest firmware and restrict access to the IPP service with proper network controls. Consider implementing a firewall rule to block unauthorized packets as an added security layer. You've got this! With these steps, your printer will be back in action in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01924 · 79.8th percentile
Published
2020-03-13T18:45Z
EPSS history
Timeline
  • 13 MAR 18:45Z
    Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3)
    cvelistv5