CVE-2018-17312: Ricoh Aficio Mp 301spf Firmware

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

On the RICOH Aficio MP 301 printer, HTML Injection and Stored XSS vulnerabilities have been discovered in the area of adding addresses via the entryNameIn parameter to /web/entry/en/address/adrsSetUserWizard.cgi.

Affected products

• Ricoh Aficio Mp 301spf Firmware: affected versions not specified

Published 2018-09-26. Last modified 2026-06-17.