Rico Printer Web Server HTTP Cookie Header memory corruption

Summaryinfo

A vulnerability was found in Rico Printer and classified as critical. Affected is an unknown function of the component Web Server. Executing a manipulation as part of HTTP Cookie Header can lead to memory corruption. This vulnerability appears as CVE-2019-14300. The attack may be performed from remote. There is no available exploit.

Detailsinfo

A vulnerability classified as critical was found in Rico Printer (Printing Software) (the affected version is unknown). This vulnerability affects an unknown code of the component Web Server. The manipulation as part of a HTTP Cookie Header leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Several Ricoh printers have multiple buffer overflows parsing HTTP cookie headers, which allow an attacker to cause a denial of service or code execution via crafted requests to the web server. Affected firmware versions depend on the printer models. One affected congiguration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected congiguration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*.

The weakness was presented 08/26/2019 (Website). The advisory is shared for download at jvn.jp. This vulnerability was named CVE-2019-14300 since 07/27/2019. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See VDB-140789, VDB-140790 and VDB-140791 for similar entries. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Printing Software

Vendor

• Rico

Name

• Printer

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion