CVE-2022-43969
Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.
Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
9.1
Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.
- Record
CVE-2022-43969- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-522
- Updated
- 2026-11-02
CVE List
9.1
Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.
- Record
CVE-2022-43969- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-522
- Updated
- 2026-11-02
EUVDEUVD-2022-46937
9.1
Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.
- Record
EUVD-2022-46937- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-62wf-8699-486x
9.1
Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.
Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.
- Record
GHSA-62wf-8699-486x- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-522
- Updated
- 2026-11-02
Affected products
- ricoh im 2500 firmware
- ricoh im 2702 firmware
- ricoh im 3000 firmware
- ricoh im 3500 firmware
- ricoh im 350 firmware
- ricoh im 350f firmware
- ricoh im 4000 firmware
- ricoh im 430f firmware
- ricoh im 430fb firmware
- ricoh im 5000 firmware
- ricoh im 550f firmware
- ricoh im 6000 firmware
Show 65 moreShow less
- ricoh im 600f firmware
- ricoh im 600srf firmware
- ricoh im 7000 firmware
- ricoh im 8000 firmware
- ricoh im 9000 firmware
- ricoh im c2000 firmware
- ricoh im c2500 firmware
- ricoh im c3000 firmware
- ricoh im c300 firmware
- ricoh im c300f firmware
- ricoh im c3500 firmware
- ricoh im c400f firmware
- ricoh im c400srf firmware
- ricoh im c4500 firmware
- ricoh im c530f firmware
- ricoh im c530fb firmware
- ricoh im c5500 firmware
- ricoh im c6000 firmware
- ricoh im c6500 firmware
- ricoh im c8000 firmware
- ricoh im cw2200 firmware
- ricoh im cw2201 firmware
- ricoh m c2001 firmware
- ricoh mp 2555 firmware
- ricoh mp 3055 firmware
- ricoh mp 305\+ firmware
- ricoh mp 3555 firmware
- ricoh mp 402spf firmware
- ricoh mp 4055 firmware
- ricoh mp 5055 firmware
- ricoh mp 6055 firmware
- ricoh mp c2003 firmware
- ricoh mp c2003 smart operation panel firmware
- ricoh mp c2004 firmware
- ricoh mp c2004ex firmware
- ricoh mp c2503 firmware
- ricoh mp c2503 smart operation panel firmware
- ricoh mp c2504 firmware
- ricoh mp c2504ex firmware
- ricoh mp c3003 firmware
- ricoh mp c3003 smart operation panel firmware
- ricoh mp c3004 firmware
- ricoh mp c3004ex firmware
- ricoh mp c306 firmware
- ricoh mp c307 firmware
- ricoh mp c3503 firmware
- ricoh mp c3503 smart operation panel firmware
- ricoh mp c3504 firmware
- ricoh mp c3504ex firmware
- ricoh mp c406 firmware
- ricoh mp c407 firmware
- ricoh mp c4503 firmware
- ricoh mp c4503 smart operation panel firmware
- ricoh mp c4504 firmware
- ricoh mp c4504ex firmware
- ricoh mp c5503 firmware
- ricoh mp c5503 smart operation panel firmware
- ricoh mp c5504 firmware
- ricoh mp c5504ex firmware
- ricoh mp c6003 firmware
- ricoh mp c6003 smart operation panel firmware
- ricoh mp c6004 firmware
- ricoh mp c6004ex firmware
- ricoh pro c5300s firmware
- ricoh pro c5310s firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-43969 is a critical vulnerability (CVSS 9.1) in Ricoh Im 2500 Firmware, published February 16, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.54%, the 45th percentile. No source names a fixed version.