What’s Vulnerable › Vulnerabilities

CVE-2024-39927

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-10 · updated 2026-06-17
• Weakness: CWE-787

Description

Out-of-bounds write vulnerability exists in Ricoh MFPs and printers. If a remote attacker sends a specially crafted request to the affected products, the products may be able to cause a denial-of-service (DoS) condition and/or user's data may be destroyed.

Affected products

• RICOH 370: before system\/copy_1.10-00 — fixed in system\/copy_1.10-00
• RICOH 370F: before system\/copy_1.10-00 — fixed in system\/copy_1.10-00
• RICOH Im 460F: before system\/copy_1.10-00 — fixed in system\/copy_1.10-00
• RICOH Im 460Ftl: before system\/copy_1.10-00 — fixed in system\/copy_1.10-00
• RICOH Im C2010: before system\/copy_2.00-00 — fixed in system\/copy_2.00-00
• RICOH Im C2510: before system\/copy_2.00-00 — fixed in system\/copy_2.00-00
• RICOH Im C3010: before system\/copy_2.00-00 — fixed in system\/copy_2.00-00
• RICOH Im C3510: before system\/copy_2.00-00 — fixed in system\/copy_2.00-00
• RICOH Im C4510: before system\/copy_2.00-00 — fixed in system\/copy_2.00-00
• RICOH Im C5510: before system\/copy_2.00-00 — fixed in system\/copy_2.00-00
• RICOH Im C6010: before system\/copy_2.00-00 — fixed in system\/copy_2.00-00
• Ricoh Company, Ltd. IM C7010: before system\/copy_1.05-00 — fixed in system\/copy_1.05-00
• RICOH Im C8500: before system\/copy_1.04-00 — fixed in system\/copy_1.04-00
• RICOH Im C8500M: before system\/copy_1.04-00 — fixed in system\/copy_1.04-00
• RICOH Im C8510M: before system\/copy_1.04-00 — fixed in system\/copy_1.04-00

How to fix

Upgrade to a fixed version: RICOH 370 system\/copy_1.10-00; RICOH 370F system\/copy_1.10-00; RICOH Im 460F system\/copy_1.10-00; RICOH Im 460Ftl system\/copy_1.10-00; RICOH Im C2010 system\/copy_2.00-00; RICOH Im C2510 system\/copy_2.00-00; RICOH Im C3010 system\/copy_2.00-00; RICOH Im C3510 system\/copy_2.00-00; RICOH Im C4510 system\/copy_2.00-00; RICOH Im C5510 system\/copy_2.00-00; RICOH Im C6010 system\/copy_2.00-00; Ricoh Company, Ltd. IM C7010 system\/copy_1.05-00. Check the vendor advisory for mitigations.

References

• https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2024-000008
• https://jvn.jp/en/jp/JVN14294633/
• https://jvn.jp/jp/JVN14294633/
• https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000008
• https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2024-000008
• https://jvn.jp/en/jp/JVN14294633/
• https://jvn.jp/jp/JVN14294633/
• https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000008

Get alerted when CVE-2024-39927 or the next vulnerability affects your stack