CVE-2022-43969

Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials

Critical · published February 16, 2023

CVSS v3.1
9.1
EPSS
1%
Percentile
44.4
In the wild
Unconfirmed
What it is

🚨 A critical vulnerability in Ricoh MP C4504ex devices with firmware 1.06 could let attackers snag credentials like a thief slipping through a hotel's back door! 🔥 Imagine a hotel where the security guard just waves anyone through without checking IDs — that’s how these devices mishandle sensitive information, allowing unauthorized access. An attacker could potentially gain admin access, leading to sensitive documents being printed, altered, or even deleted at will! This oversight could compromise your entire network, making it a recipe for disaster.

Put simply

Imagine a hotel where the security guard just waves anyone through without checking IDs — that’s how these devices mishandle sensitive information, allowing unauthorized access. This vulnerability arises from improper handling of credentials, allowing unauthorized users to access the MP C4504ex devices without sufficient verification.

What to do

An attacker could potentially gain admin access, leading to sensitive documents being printed, altered, or even deleted at will! This oversight could compromise your entire network, making it a recipe for disaster. Immediately update the firmware to the latest version provided by Ricoh. Review device configurations to ensure strict credential management practices are enforced, and consider implementing network isolation for sensitive devices. You've got this! Act quickly, and you'll secure your devices in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00536 · 44.4th percentile
Published
2023-02-16T00:00Z
EPSS history
Timeline
  • 16 FEB 00:00Z
    Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials
    cvelistv5