CVE-2024-47939 HIGH

CVE-2024-47939

Vendor Ricoh Company, Ltd.
Product Multiple laser printers and MFPs which implement Web Image Monitor
Weakness CWE-121
Published November 1, 2024
Last update May 21, 2025

CVSS base score

7.7/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

What the vulnerability does

01Description

Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].

Key dates

02Disclosure timeline

November 1, 2024 CVE published
May 21, 2025 Record updated