Ricoh Laser Printers and MFPs Vulnerable to Stack-Based Buffer Overflow
CVE-2024-47939
What is CVE-2024-47939?
A stack-based buffer overflow vulnerability is present in various Ricoh laser printers and multifunction printers (MFPs) that utilize the Web Image Monitor feature. Exploitation of this vulnerability occurs when attackers send specially crafted requests, potentially leading to arbitrary code execution. This flaw not only exposes the affected devices to unauthorized control but could also result in a denial-of-service (DoS) condition, severely impacting the availability and functionality of the devices. It is crucial for users of these Ricoh products to stay informed and apply recommended security measures as outlined in vendor advisories.
Affected Version(s)
Multiple laser printers and MFPs which implement Web Image Monitor see the information provided by the vendor
Multiple MFPs which implement Web Image Monitor see the information provided by the vendor
References
CVSS V3.1
CVSS V3.0
Timeline
Vulnerability published
Vulnerability Reserved