Ricoh: Security Vulnerabilities
RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter.
CVSS Score
8.8
EPSS Score
0.003
Published
2018-08-28
Buffer overflow in Ricoh DL FTP Server 1.1.0.6 and earlier allows remote attackers to execute arbitrary code via a long USER command.
CVSS Score
7.5
EPSS Score
0.061
Published
2015-08-31
Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command.
CVSS Score
6.8
EPSS Score
0.341
Published
2012-09-19
Page 5