Local Privilege Escalation in Ricoh Windows Printer Drivers
CVE-2019-19363

7.8HIGH

Key Information:

Vendor

Ricoh

Status
Ps Driver For Universal Print
Pcl6 Driver For Universal Print
Rpcs Driver
Postscript3 Driver
Vendor
CVE Published:
24 January 2020

What is CVE-2019-19363?

A vulnerability was identified in Ricoh Windows printer drivers (inclusive of Savin and Lanier brands) prior to 2020, which potentially permits local privilege escalation by attackers. This flaw affects various drivers, including the PCL6 Driver for Universal Print and several others across different versions. If exploited, it could allow unauthorized elevations of user privileges, leading to potential security breaches in affected systems.

References

https://www.ricoh.com/info/2020/0122_1/
x_refsource_CONFIRM
http://seclists.org/fulldisclosure/2020/Jan/34
mailing-listx_refsource_FULLDISC
http://packetstormsecurity.com/files/156082/Ricoh-Printer...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.