Vulnerabilities > Ricoh > High

DATE CVE VULNERABILITY TITLE RISK
2023-06-19 CVE-2023-30759 Insufficient Verification of Data Authenticity vulnerability in Ricoh Printer Driver Packager NX 1.0.02/1.1.25
The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modification and may spawn an unexpected process with the administrative privilege.
local
low complexity
ricoh CWE-345
7.8
2022-09-08 CVE-2022-36403 Untrusted Search Path vulnerability in Ricoh Device Software Manager
Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
local
low complexity
ricoh CWE-426
7.8
2020-08-04 CVE-2019-20001 Unspecified vulnerability in Ricoh Streamline NX Client Tool and Streamline NX PC Client
An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to escalate local privileges.
local
low complexity
ricoh
7.8
2020-03-13 CVE-2019-14309 Use of Hard-coded Credentials vulnerability in Ricoh products
Ricoh SP C250DN 1.05 devices have a fixed password.
network
low complexity
ricoh CWE-798
7.5
2020-03-13 CVE-2019-14303 Unspecified vulnerability in Ricoh products
Ricoh SP C250DN 1.05 devices allow denial of service (issue 1 of 3).
network
low complexity
ricoh
7.5
2020-01-24 CVE-2019-19363 Incorrect Permission Assignment for Critical Resource vulnerability in Ricoh products
An issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to 2020 that allows attackers local privilege escalation.
local
low complexity
ricoh CWE-732
7.8
2020-01-10 CVE-2019-14306 Unspecified vulnerability in Ricoh products
Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).
network
low complexity
ricoh
7.5
2020-01-10 CVE-2019-14304 Cross-Site Request Forgery (CSRF) vulnerability in Ricoh products
Ricoh SP C250DN 1.06 devices allow CSRF.
network
low complexity
ricoh CWE-352
8.8
2020-01-10 CVE-2019-14301 Information Exposure vulnerability in Ricoh products
Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2).
network
low complexity
ricoh CWE-200
7.5
2019-12-31 CVE-2019-7751 Path Traversal vulnerability in Ricoh Fusionpro VDP
A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, formerly PTI Marketing, FusionPro VDP before 10.0 allows a remote attacker to list or enumerate sensitive contents of files.
network
low complexity
ricoh CWE-22
7.5