CVE-2022-37406: Ricoh Aficio SP 4210n Firmware

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in Aficio SP 4210N firmware versions prior to Web Support 1.05 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

Affected products

• Ricoh Aficio SP 4210n Firmware: before 1.05 (fixed in 1.05)

Published 2022-12-07. Last modified 2026-06-17.