CVE-2019-14302

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-01-10 · updated 2026-06-17

Description

On Ricoh SP C250DN 1.06 devices, a debug port can be used.

Affected products

RICOH M 2700 Firmware: before 1.06 — fixed in 1.06
RICOH M 2701 Firmware: before 1.06 — fixed in 1.06
RICOH Mp 2014 Firmware: before 1.10 — fixed in 1.10
RICOH Mp 2014Ad Firmware: before 1.10 — fixed in 1.10
RICOH Mp 2014D Firmware: before 1.10 — fixed in 1.10
RICOH Sp277Nwx Firmware: before 1.04 — fixed in 1.04
RICOH Sp 210 (China) Firmware: before 1.02 — fixed in 1.02
RICOH Sp 210 Firmware: before 1.06 — fixed in 1.06
RICOH Sp 210 Q (China) Firmware: before 1.02 — fixed in 1.02
RICOH Sp 210E (China) Firmware: before 1.02 — fixed in 1.02
RICOH Sp 210Sf (China) Firmware: before 1.06 — fixed in 1.06
RICOH Sp 210Sf Firmware: before 1.06 — fixed in 1.06
RICOH Sp 210Sf Q (China) Firmware: before 1.06 — fixed in 1.06
RICOH Sp 210Su (China) Firmware: before 1.06 — fixed in 1.06
RICOH Sp 210Su Firmware: before 1.06 — fixed in 1.06
RICOH Sp 210Su Q (China) Firmware: before 1.06 — fixed in 1.06
RICOH Sp 211 Firmware: before 1.06 — fixed in 1.06
RICOH Sp 211Sf Firmware: before 1.06 — fixed in 1.06
RICOH Sp 211Su Firmware: before 1.06 — fixed in 1.06
RICOH Sp 212Nw Firmware: before 1.06 — fixed in 1.06
RICOH Sp 212Sfnw (China) Firmware: before 1.08 — fixed in 1.08
RICOH Sp 212Sfnw Firmware: before 1.08 — fixed in 1.08
RICOH Sp 212Sfw Firmware: before 1.08 — fixed in 1.08
RICOH Sp 212Snw Firmware: before 1.07 — fixed in 1.07
RICOH Sp 212Suw Firmware: before 1.07 — fixed in 1.07
RICOH Sp 212W Firmware: before 1.06 — fixed in 1.06
RICOH Sp 213Nw (Taiwan) Firmware: before 1.04 — fixed in 1.04
RICOH Sp 213Nw Firmware: before 1.06 — fixed in 1.06
RICOH Sp 213Sfnw (Taiwan) Firmware: before 1.06 — fixed in 1.06
RICOH Sp 213Sfnw Firmware: before 1.07 — fixed in 1.07

How to fix

Upgrade to a fixed version: RICOH M 2700 Firmware 1.06; RICOH M 2701 Firmware 1.06; RICOH Mp 2014 Firmware 1.10; RICOH Mp 2014Ad Firmware 1.10; RICOH Mp 2014D Firmware 1.10; RICOH Sp277Nwx Firmware 1.04; RICOH Sp 210 (China) Firmware 1.02; RICOH Sp 210 Firmware 1.06; RICOH Sp 210 Q (China) Firmware 1.02; RICOH Sp 210E (China) Firmware 1.02; RICOH Sp 210Sf (China) Firmware 1.06; RICOH Sp 210Sf Firmware 1.06. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-14302 or the next vulnerability affects your stack