CVE-2019-14304
Ricoh SP C250DN 1.06 devices allow CSRF.
8.8 High
Ricoh SP C250DN 1.06 devices allow CSRF.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.71%Up 0.1 points since Apr 14, 2021
What each source reports
NVD Score used
Ricoh SP C250DN 1.06 devices allow CSRF.
- Record
CVE-2019-14304- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-352
- Updated
- 2026-11-02
CVE List No score
Ricoh SP C250DN 1.06 devices allow CSRF.
- Record
CVE-2019-14304- Updated
- 2026-11-02
EUVDEUVD-2019-5531 No score
Ricoh SP C250DN 1.06 devices allow CSRF.
- Record
EUVD-2019-5531- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-34qx-g8h3-chw9
Ricoh SP C250DN 1.06 devices allow CSRF.
Ricoh SP C250DN 1.06 devices allow CSRF.
- Record
GHSA-34qx-g8h3-chw9- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-352
- Updated
- 2026-11-02
Affected products
- ricoh m 2700 firmware
- ricoh m 2701 firmware
- ricoh m c250fw firmware
- ricoh m c250fwb firmware
- ricoh mp 2014 firmware
- ricoh mp 2014ad firmware
- ricoh mp 2014d firmware
- ricoh p c300w firmware
- ricoh p c301w firmware
- ricoh sp277nwx firmware
- ricoh sp 212nw firmware
- ricoh sp 212sfnw \(china\) firmware
Show 40 moreShow less
- ricoh sp 212sfnw firmware
- ricoh sp 212sfw firmware
- ricoh sp 212snw firmware
- ricoh sp 212suw firmware
- ricoh sp 212w firmware
- ricoh sp 213nw \(taiwan\) firmware
- ricoh sp 213nw firmware
- ricoh sp 213sfnw \(taiwan\) firmware
- ricoh sp 213sfnw firmware
- ricoh sp 213sfw firmware
- ricoh sp 213snw \(taiwan\) firmware
- ricoh sp 213snw firmware
- ricoh sp 213suw firmware
- ricoh sp 213w firmware
- ricoh sp 220nw firmware
- ricoh sp 220sfnw firmware
- ricoh sp 220snw firmware
- ricoh sp 221 firmware
- ricoh sp 221nw firmware
- ricoh sp 221s firmware
- ricoh sp 221sf firmware
- ricoh sp 221sfnw firmware
- ricoh sp 221snw firmware
- ricoh sp 277sfnwx firmware
- ricoh sp 277snwx firmware
- ricoh sp 330dn firmware
- ricoh sp 330sfn firmware
- ricoh sp 330sn firmware
- ricoh sp 3710dn firmware
- ricoh sp 3710sf firmware
- ricoh sp c250dn firmware
- ricoh sp c250sf firmware
- ricoh sp c252dn firmware
- ricoh sp c252sf firmware
- ricoh sp c260dnw firmware
- ricoh sp c260sfnw firmware
- ricoh sp c261dnw firmware
- ricoh sp c261sfnw firmware
- ricoh sp c262dnw firmware
- ricoh sp c262sfnw firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-14304 is a high vulnerability (CVSS 8.8) in Ricoh M 2700 Firmware, published January 10, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile. No source names a fixed version.