6.1
CVSS 3.0
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и след действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
Reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor. If exploited, an arbitrary script may be executed on the web browser of the user who accessed Web Image Monitor. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].
Засегнати продукти
- Ricoh Company, Ltd. Multiple laser printers and MFPs which implement Web Image Monitor: see the information provided by the vendor
- KONICA MINOLTA JAPAN, INC. Multiple MFPs which implement Web Image Monitor: see the information provided by the vendor
Вид слабост
История
- 12 май 2025 Публикувано
Други уязвимости в Ricoh Company, Ltd. Multiple laser printers and MFPs which implement Web Image Monitor
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2025-41393
- https://nvd.nist.gov/vuln/detail/CVE-2025-41393
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000001
- https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2025-000001
- https://www.konicaminolta.jp/business/support/important/250714_01_01.html
- https://jvn.jp/en/jp/JVN20474768/