{"id":"CVE-2019-14309","aliases":["EUVD-2019-5536","GHSA-5m73-4296-xfp6"],"status":"published","title":"Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be...","description":"Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01196,"percentile":0.68292,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2020-03-13T18:47:15Z","modified":"2026-06-17T02:18:10Z","products":[{"vendor":"ricoh","product":"sp_c250dn_firmware"},{"vendor":"ricoh","product":"sp_c250sf_firmware"},{"vendor":"ricoh","product":"sp_c252dn_firmware"},{"vendor":"ricoh","product":"sp_c252sf_firmware"}],"references":[{"url":"https://www.ricoh-usa.com/en/support-and-download","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://www.nccgroup.trust/us/our-research/technical-advisory-multiple-vulnerabilities-in-ricoh-printers/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14309"},{"url":"https://github.com/advisories/GHSA-5m73-4296-xfp6"}],"sources":{"cve":[{"id":"CVE-2019-14309","description":"Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders.","status":"published","published":"2020-03-13T18:47:15Z","modified":"2024-08-05T00:12:43.38Z","updated_at":"2026-11-02T14:20:17.722148Z"}],"euvd":[{"id":"EUVD-2019-5536","description":"Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders.","status":"published","published":"2020-03-13T18:47:15Z","modified":"2024-08-05T00:12:43Z","updated_at":"2026-11-03T02:40:40.053391Z"}],"ghsa":[{"id":"GHSA-5m73-4296-xfp6","title":"Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be...","description":"Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders.","status":"published","published":"2022-05-24T17:11:26Z","modified":"2023-01-29T05:01:48Z","updated_at":"2026-11-02T14:44:54.907829Z"}],"nvd":[{"id":"CVE-2019-14309","description":"Ricoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be hardcoded within the printer firmware. This would allow to an attacker to access and read information stored on the shared FTP folders.","status":"published","published":"2020-03-13T19:15:16.837Z","modified":"2026-06-17T02:18:10.76Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:05:45.254119Z"}]}}