Potential security vulnerabilities in some of Ricoh’s printers and Multifunction Printers (MFPs)

Ricoh understands the importance of security and is committed to managing its products and services with the most advanced security technologies possible for their customers around the world.

Following the information disclosed in August, Ricoh has provided new firmware updates to address the identified vulnerabilities.

To minimize potential security risks, Ricoh asks that customers follow the below practices.

1. When the device is connected to a network, make sure that the network is protected, for instance, by a firewall.
2. Install the device in a secure network where users are restricted.
3. To protect the device from fraudulent operation by malicious persons, make sure to set up and periodically change passwords for the administrator and supervisor.
   Complex passwords more than 8 characters are recommended.
4. Install the device in an environment under appropriate physical security to prevent unauthorized access.

For further details on best practices for securely setting up your printer or MFP, please visit here.

Ricoh constantly evaluates their products, especially when new vulnerabilities are identified, and will continue to update this list should any models manufactured since January 2014 be affected.

* Note: The model is NOT impacted by CVE-2019-14300, 14301, 14304, 14305, 14306,14307, 14308 because of USB connection.