{"id":"CVE-2024-47939","aliases":["EUVD-2024-42841","GHSA-589r-q985-q5r6"],"status":"published","title":"Stack-based buffer overflow vulnerability exists in multiple Ricoh laser printers and MFPs which...","description":"Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].","severity":{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00698,"percentile":0.53545,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-121"],"published":"2024-11-01T04:29:04Z","modified":"2026-06-17T07:58:00Z","products":[{"vendor":"konica minolta japan, inc.","product":"multiple mfps which implement web image monitor"},{"vendor":"konica minolta, inc.","product":"multiple mfps which implement web image monitor"},{"vendor":"ricoh company, ltd.","product":"multiple laser printers and mfps which implement web image monitor"}],"references":[{"url":"https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000011"},{"url":"https://jp.ricoh.com/security/products/vulnerabilities/vul?id=ricoh-2024-000011"},{"url":"https://www.konicaminolta.jp/business/support/important/250519_01_01.html"},{"url":"https://jvn.jp/en/jp/JVN87770340/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47939"},{"url":"https://jvn.jp/en/jp/JVN87770340"},{"url":"https://github.com/advisories/GHSA-589r-q985-q5r6"}],"sources":{"cve":[{"id":"CVE-2024-47939","description":"Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].","status":"published","published":"2024-11-01T04:29:04.04Z","modified":"2025-05-21T07:02:10.101Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:33:57.302325Z"}],"euvd":[{"id":"EUVD-2024-42841","description":"Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].","status":"published","published":"2024-11-01T04:29:04Z","modified":"2025-05-21T07:02:10Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T20:32:41.963587Z"}],"ghsa":[{"id":"GHSA-589r-q985-q5r6","title":"Stack-based buffer overflow vulnerability exists in multiple Ricoh laser printers and MFPs which...","description":"Stack-based buffer overflow vulnerability exists in multiple Ricoh laser printers and MFPs which implement Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendor under [References].","status":"published","published":"2024-11-01T06:30:34Z","modified":"2024-11-01T06:30:45Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:58:40.851254Z"}],"nvd":[{"id":"CVE-2024-47939","description":"Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].","status":"published","published":"2024-11-01T05:15:05.95Z","modified":"2026-06-17T07:58:00.26Z","cvss":[{"version":"3.0","score":7.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:10:35.289159Z"}]}}