Approved changes feed: RSS · Atom

cpe:2.3:o:ricoh:sp_c252dn_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorRicoh (fbb2e786-569b-5b3f-81f1-e3f32e37bc94)
ProductSp C252Dn Firmware (17e95f40-fd9a-5a31-93e5-9ec89b22b209)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-14310 vulnerable 2026-06-08 05:12:54.528765 Details available
Ricoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3). Unauthenticated crafted packets to the IPP service will cause a vulnerable device to crash. A memory corruption has been identified in the way of how the embedded device parsed the IPP packets
Published: 2020-03-13T18:45:22.000Z
Updated: 2024-08-05T00:12:43.396Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14309 vulnerable 2026-06-08 05:12:54.528204 Details available
Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders.
Published: 2020-03-13T18:47:15.000Z
Updated: 2024-08-05T00:12:43.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14308 vulnerable 2026-06-08 05:12:54.527605 Details available
CRITICAL (9.8)
Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted requests to the LPD service. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*.
Published: 2019-08-26T13:28:30.000Z
Updated: 2024-08-05T00:12:43.376Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14307 vulnerable 2026-06-08 05:12:54.526940 Details available
HIGH (8.8)
Several Ricoh printers have multiple buffer overflows parsing HTTP parameter settings for SNMP, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*.
Published: 2019-08-26T14:18:04.000Z
Updated: 2024-08-05T00:12:43.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14306 vulnerable 2026-06-08 05:12:54.522741 Details available
Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).
Published: 2020-01-10T17:59:24.000Z
Updated: 2024-08-05T00:12:43.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14305 vulnerable 2026-06-08 05:12:54.521172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14304 vulnerable 2026-06-08 05:12:54.517672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14303 vulnerable 2026-06-08 05:12:54.516033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14302 vulnerable 2026-06-08 05:12:54.483496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14301 vulnerable 2026-06-08 05:12:54.426434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14300 vulnerable 2026-06-08 05:12:54.424688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14299 vulnerable 2026-06-08 05:12:54.422074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.