Approved changes feed: RSS · Atom

cpe:2.3:o:ricoh:sp_c252sf_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorRicoh (fbb2e786-569b-5b3f-81f1-e3f32e37bc94)
ProductSp C252Sf Firmware (f2ca15d6-eb51-587b-85d9-e51b01587e7a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-14310 vulnerable 2026-06-08 05:12:54.528698 Details available
Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3). Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identified in the way of how the embedded device parsed the IPP packets
Published: 2020-03-13T18:45:22.000Z
Updated: 2024-08-05T00:12:43.396Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14309 vulnerable 2026-06-08 05:12:54.528036 Details available
Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders.
Published: 2020-03-13T18:47:15.000Z
Updated: 2024-08-05T00:12:43.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14308 vulnerable 2026-06-08 05:12:54.527535 Details available
CRITICAL (9.8)
Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted requests to the LPD service. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*.
Published: 2019-08-26T13:28:30.000Z
Updated: 2024-08-05T00:12:43.376Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14307 vulnerable 2026-06-08 05:12:54.526783 Details available
HIGH (8.8)
Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*.
Published: 2019-08-26T14:18:04.000Z
Updated: 2024-08-05T00:12:43.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14306 vulnerable 2026-06-08 05:12:54.522490 Details available
Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).
Published: 2020-01-10T17:59:24.000Z
Updated: 2024-08-05T00:12:43.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14305 vulnerable 2026-06-08 05:12:54.521000 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14304 vulnerable 2026-06-08 05:12:54.517496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14303 vulnerable 2026-06-08 05:12:54.515963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14302 vulnerable 2026-06-08 05:12:54.483303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14301 vulnerable 2026-06-08 05:12:54.426077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14300 vulnerable 2026-06-08 05:12:54.423401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14299 vulnerable 2026-06-08 05:12:54.418669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.