What’s Vulnerable › Vulnerabilities

CVE-2019-14306

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-01-10 · updated 2026-06-17

Description

Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).

Affected products

• RICOH M 2700 Firmware: before 1.06 — fixed in 1.06
• RICOH M 2701 Firmware: before 1.06 — fixed in 1.06
• RICOH Mp 2014 Firmware: before 1.10 — fixed in 1.10
• RICOH Mp 2014Ad Firmware: before 1.10 — fixed in 1.10
• RICOH Mp 2014D Firmware: before 1.10 — fixed in 1.10
• RICOH Sp277Nwx Firmware: before 1.04 — fixed in 1.04
• RICOH Sp 212Nw Firmware: before 1.06 — fixed in 1.06
• RICOH Sp 212Sfnw (China) Firmware: before 1.08 — fixed in 1.08
• RICOH Sp 212Sfnw Firmware: before 1.08 — fixed in 1.08
• RICOH Sp 212Sfw Firmware: before 1.08 — fixed in 1.08
• RICOH Sp 212Snw Firmware: before 1.07 — fixed in 1.07
• RICOH Sp 212Suw Firmware: before 1.07 — fixed in 1.07
• RICOH Sp 212W Firmware: before 1.06 — fixed in 1.06
• RICOH Sp 213Nw (Taiwan) Firmware: before 1.04 — fixed in 1.04
• RICOH Sp 213Nw Firmware: before 1.06 — fixed in 1.06
• RICOH Sp 213Sfnw (Taiwan) Firmware: before 1.06 — fixed in 1.06
• RICOH Sp 213Sfnw Firmware: before 1.07 — fixed in 1.07
• RICOH Sp 213Sfw Firmware: before 1.07 — fixed in 1.07
• RICOH Sp 213Snw (Taiwan) Firmware: before 1.05 — fixed in 1.05
• RICOH Sp 213Snw Firmware: before 1.07 — fixed in 1.07
• RICOH Sp 213Suw Firmware: before 1.07 — fixed in 1.07
• RICOH Sp 213W Firmware: before 1.06 — fixed in 1.06
• RICOH Sp 220Nw Firmware: before 1.04 — fixed in 1.04
• RICOH Sp 220Sfnw Firmware: before 1.12 — fixed in 1.12
• RICOH Sp 220Snw Firmware: before 1.11 — fixed in 1.11
• RICOH Sp 221 Firmware: before 1.02 — fixed in 1.02
• RICOH Sp 221Nw Firmware: before 1.04 — fixed in 1.04
• RICOH Sp 221S Firmware: before 1.10 — fixed in 1.10
• RICOH Sp 221Sf Firmware: before 1.11 — fixed in 1.11
• RICOH Sp 221Sfnw Firmware: before 1.12 — fixed in 1.12

How to fix

Upgrade to a fixed version: RICOH M 2700 Firmware 1.06; RICOH M 2701 Firmware 1.06; RICOH Mp 2014 Firmware 1.10; RICOH Mp 2014Ad Firmware 1.10; RICOH Mp 2014D Firmware 1.10; RICOH Sp277Nwx Firmware 1.04; RICOH Sp 212Nw Firmware 1.06; RICOH Sp 212Sfnw (China) Firmware 1.08; RICOH Sp 212Sfnw Firmware 1.08; RICOH Sp 212Sfw Firmware 1.08; RICOH Sp 212Snw Firmware 1.07; RICOH Sp 212Suw Firmware 1.07. Check the vendor advisory for mitigations.

References

• http://jvn.jp/en/jp/JVN52962201/index.html
• https://www.ricoh.com/info/2019/0823_1/
• http://jvn.jp/en/jp/JVN52962201/index.html
• https://www.ricoh.com/info/2019/0823_1/

Get alerted when CVE-2019-14306 or the next vulnerability affects your stack