Approved changes feed: RSS · Atom

cpe:2.3:o:ricoh:sp_c250sf_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorRicoh (fbb2e786-569b-5b3f-81f1-e3f32e37bc94)
ProductSp C250Sf Firmware (b3846b29-6015-50d1-80f5-2896b8345a0a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-14310 vulnerable 2026-06-08 05:12:54.528658 Details available
Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3). Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identified in the way of how the embedded device parsed the IPP packets
Published: 2020-03-13T18:45:22.000Z
Updated: 2024-08-05T00:12:43.396Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14309 vulnerable 2026-06-08 05:12:54.527997 Details available
Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders.
Published: 2020-03-13T18:47:15.000Z
Updated: 2024-08-05T00:12:43.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14308 vulnerable 2026-06-08 05:12:54.527404 Details available
CRITICAL (9.8)
Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted requests to the LPD service. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*.
Published: 2019-08-26T13:28:30.000Z
Updated: 2024-08-05T00:12:43.376Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14307 vulnerable 2026-06-08 05:12:54.526741 Details available
HIGH (8.8)
Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*.
Published: 2019-08-26T14:18:04.000Z
Updated: 2024-08-05T00:12:43.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14306 vulnerable 2026-06-08 05:12:54.522445 Details available
Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).
Published: 2020-01-10T17:59:24.000Z
Updated: 2024-08-05T00:12:43.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14305 vulnerable 2026-06-08 05:12:54.520962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14304 vulnerable 2026-06-08 05:12:54.517455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14303 vulnerable 2026-06-08 05:12:54.515916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14302 vulnerable 2026-06-08 05:12:54.483254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14301 vulnerable 2026-06-08 05:12:54.426034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14300 vulnerable 2026-06-08 05:12:54.423259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14299 vulnerable 2026-06-08 05:12:54.417327 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.