Ricoh Sp277nwx Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Ricoh Sp277nwx Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2019-14304 — CVSS 8.8 (high): Ricoh SP C250DN 1.06 devices allow CSRF.
• CVE-2019-14301 — CVSS 7.5 (high): Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 1 of 2).
• CVE-2019-14306 — CVSS 7.5 (high): Ricoh SP C250DN 1.06 devices have Incorrect Access Control (issue 2 of 2).
• CVE-2019-14302 — CVSS 6.8 (medium): On Ricoh SP C250DN 1.06 devices, a debug port can be used.