CVE-2012-5002: Ricoh Dl-10

Medium severity, CVSS 6.8. EPSS: 31.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in SR10 FTP server (SR10.exe) 1.1.0.6 in Ricoh DC Software DL-10 4.5.0.1, when the Log file name option is enabled, allows remote attackers to execute arbitrary code via a long USER FTP command.

Affected products

  • Ricoh Dl-10: version 4.5.0.1 only
  • Ricoh SR10 FTP Server: version 1.1.0.6 only

Published 2012-09-19. Last modified 2026-06-16.