7.7
CVSS 3.0
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, при специфични условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката може да се автоматизира
Описание
Оригинално описание
Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].
Засегнати продукти
- Ricoh Company, Ltd. Multiple laser printers and MFPs which implement Web Image Monitor: see the information provided by the vendor
- KONICA MINOLTA, INC. Multiple MFPs which implement Web Image Monitor: see the information provided by the vendor
Вид слабост
История
- 1 ноември 2024 Публикувано
Други уязвимости в Ricoh Company, Ltd. Multiple laser printers and MFPs which implement Web Image Monitor
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2024-47939
- https://nvd.nist.gov/vuln/detail/CVE-2024-47939
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000011
- https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2024-000011
- https://www.konicaminolta.jp/business/support/important/250519_01_01.html
- https://jvn.jp/en/jp/JVN87770340/