Ricoh SP277NWX Firmware vulnerabilities

4 CVEs affecting Ricoh SP277NWX Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-14306, published 2020-01-10.

More from Ricoh.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-14306, published 2020-01-10. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).
• CVE-2019-14301, published 2020-01-10. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2).
• CVE-2019-14304, published 2020-01-10. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Ricoh SP C250DN 1.06 devices allow CSRF.
• CVE-2019-14302, published 2020-01-10. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. On Ricoh SP C250DN 1.06 devices, a debug port can be used.