Vulnerabilities > CVE-2021-33945 - Out-of-bounds Write vulnerability in Ricoh products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

ricoh

CWE-787

NVD

Published: 2022-02-15

Updated: 2022-05-11

Summary

RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpa_supplicant.conf. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.

Vulnerable Configurations

Part	Description	Count
OS	Ricoh Ricoh SP 320Dn Firmware 1.06 Ricoh SP 325Dnw Firmware 1.06 Ricoh SP 325Dnw Firmware - Ricoh SP 320Sn Firmware 1.06 Ricoh SP 320Sfn Firmware 1.06 Ricoh SP 325Snw Firmware 1.06 Ricoh SP 325Snw Firmware - Ricoh SP 325Sfnw Firmware 1.06 Ricoh SP 325Sfnw Firmware - Ricoh SP 330Sn Firmware 1.06 Ricoh SP 330Sn Firmware - Ricoh Aficio SP 3500Sf Firmware 1.06 Ricoh SP 221S Firmware 1.06 Ricoh SP 220Snw Firmware 1.06 Ricoh SP 220Snw Firmware - Ricoh SP 221Snw Firmware 1.06 Ricoh SP 221Snw Firmware - Ricoh SP 221Sf Firmware 1.06 Ricoh SP 220Sfnw Firmware 1.06 Ricoh SP 220Sfnw Firmware - Ricoh SP 221Sfnw Firmware 1.06 Ricoh SP 221Sfnw Firmware - Ricoh M C2000 Firmware - Ricoh M C250Fwb Firmware - Ricoh M C250Fw Firmware - Ricoh SP C260Sfnw Firmware - Ricoh SP C262Sfnw Firmware - Ricoh SP C261Sfnw Firmware - Ricoh SP C250Sf Firmware - Ricoh SP C252Sf Firmware - Ricoh P C300W Firmware - Ricoh P C301W Firmware - Ricoh SP C260Dnw Firmware - Ricoh SP C262Dnw Firmware - Ricoh SP C261Dnw Firmware - Ricoh SP C250Dn Firmware - Ricoh SP C252Dn Firmware - Ricoh M 320 Firmware - Ricoh M 320Fb Firmware - Ricoh M 320F Firmware - Ricoh M 2700 Firmware - Ricoh M 2701 Firmware - Ricoh SP 330Sfn Firmware - Ricoh SP 3710Sf Firmware - Ricoh SP 277Snwx Firmware - Ricoh SP 277Sfnwx Firmware - Ricoh SP 377Snwx Firmware - Ricoh SP 377Sfnwx Firmware - Ricoh SP 212Sfnw Firmware - Ricoh SP 212Sfw Firmware - Ricoh SP 212Snw Firmware - Ricoh SP 212Suw Firmware - Ricoh SP 213Sfnw Firmware - Ricoh SP 213Sfw Firmware - Ricoh SP 213Snw Firmware - Ricoh SP 213Suw Firmware - Ricoh SP 311Sfnw Firmware - Ricoh SP 310Sfnw Firmware - Ricoh SP 312Sfnw Firmware - Ricoh P 310 Firmware - Ricoh P 311 Firmware - Ricoh SP 330Dn Firmware - Ricoh SP 3710Dn Firmware - Ricoh SP 220Nw Firmware - Ricoh SP 221Nw Firmware - Ricoh SP 277Nwx Firmware - Ricoh SP 377Dnwx Firmware - Ricoh SP 212Nw Firmware - Ricoh SP 212W Firmware - Ricoh SP 213Nw Firmware - Ricoh SP 213W Firmware - Ricoh SP 311Dnw Firmware - Ricoh SP 310Dnw Firmware - Ricoh SP 312Dnw Firmware -	74
Hardware	Ricoh Ricoh SP 320Dn - Ricoh SP 325Dnw - Ricoh SP 320Sn - Ricoh SP 320Sfn - Ricoh SP 325Snw - Ricoh SP 325Sfnw - Ricoh SP 330Sn - Ricoh Aficio SP 3500Sf - Ricoh SP 221S - Ricoh SP 220Snw - Ricoh SP 221Snw - Ricoh SP 221Sf - Ricoh SP 220Sfnw - Ricoh SP 221Sfnw - Ricoh M C2000 - Ricoh M C250Fwb - Ricoh M C250Fw - Ricoh SP C260Sfnw - Ricoh SP C262Sfnw - Ricoh SP C261Sfnw - Ricoh SP C250Sf - Ricoh SP C252Sf - Ricoh P C300W - Ricoh P C301W - Ricoh SP C260Dnw - Ricoh SP C262Dnw - Ricoh SP C261Dnw - Ricoh SP C250Dn - Ricoh SP C252Dn - Ricoh M 320 - Ricoh M 320Fb - Ricoh M 320F - Ricoh M 2700 - Ricoh M 2701 - Ricoh SP 330Sfn - Ricoh SP 3710Sf - Ricoh SP 277Snwx - Ricoh SP 277Sfnwx - Ricoh SP 377Snwx - Ricoh SP 377Sfnwx - Ricoh SP 212Sfnw - Ricoh SP 212Sfw - Ricoh SP 212Snw - Ricoh SP 212Suw - Ricoh SP 213Sfnw - Ricoh SP 213Sfw - Ricoh SP 213Snw - Ricoh SP 213Suw - Ricoh SP 311Sfnw - Ricoh SP 310Sfnw - Ricoh SP 312Sfnw - Ricoh P 310 - Ricoh P 311 - Ricoh SP 330Dn - Ricoh SP 3710Dn - Ricoh SP 220Nw - Ricoh SP 221Nw - Ricoh SP 277Nwx - Ricoh SP 377Dnwx - Ricoh SP 212Nw - Ricoh SP 212W - Ricoh SP 213Nw - Ricoh SP 213W - Ricoh SP 311Dnw - Ricoh SP 310Dnw - Ricoh SP 312Dnw -	66

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References