Ricoh MFP/Printer Multiple CVEs Advisory (RCE/DoS/Info Disclosure)

Critical Vulnerability Information Vulnerability Overview Vulnerability Title: Specific Ricoh MFP and Printer Products - Multiple vulnerabilities (CVE-2017-9765, CVE-2024-2169, CVE-2024-51977, CVE-2024-51979, CVE-2024-51980, CVE-2024-51981, CVE-2024-51982, CVE-2024-51983, CVE-2024-51984) Initial Release Date: June 25, 2025, 03:00 PM (UTC+09:00) Vulnerability Details CVE IDs: - CVE-2017-9765: Stack buffer overflow may lead to malicious code execution or application crash. - CVE-2024-2169: Infinite message loop between servers may cause denial of service. - CVE-2024-51977: Unauthorized access to data. - CVE-2024-51979: Stack buffer overflow may cause system instability and malicious code execution. - CVE-2024-51980: Forced TCP connection may lead to unintended remote access. - CVE-2024-51981: Risk of unauthorized IIJTP requests being forwarded to other hosts within the local network. - CVE-2024-51982: Device crash triggered by external input may result in denial of service and system instability. - CVE-2024-51983: Device crash caused by external input may result in denial of service and system instability. - CVE-2024-51984: Risk of printer data exposure via return attack. CVSS v3.1 Base Score: 8.1 [HIGH] Affected Products and Services Products/Services: - SP 230DNw - P 201W - M 340W - SP 230SFNw - M 340FW Status: Affected Contact Information Contact your local Ricoh representative or dealer for any inquiries. History 2025-06-25T16:00:00+09:00: 1.00E Initial public release ``` This information provides detailed descriptions of multiple vulnerabilities in Ricoh MFP and printer products, including specific risks associated with each CVE ID, a list of affected products, and instructions for contacting support.

Goal Reached Thanks to every supporter — we hit 100%!

Ricoh MFP/Printer Multiple CVEs Advisory (RCE/DoS/Info Disclosure)