A Server-Side Request Forgery vulnerability
First published: 04:00 pm on February 21, 2023 (2023-02-21T14:00:00+09:00)
Ricoh Company, Ltd.
Ricoh understands the importance of security and is committed to managing its products and services with the most advanced security technologies possible for its customers worldwide.
Ricoh has identified a Server-Side Request Forgery (SSRF) vulnerability(CVE-2023-23560) in some of our devices listed below.
SSRF can occur because of a lack of input validation.
Successful exploitation of this vulnerability can lead to an attacker being able to remotely execute arbitrary code on a device. Please refer to the following URL for further details:
https://nvd.nist.gov/vuln/detail/CVE-2023-23560
| Vulnerability Information ID | ricoh-2023-000002 |
| Version | 1.00E |
| CVE ID(CWE ID) | CVE-2023-23560 (CWE-918) |
| CVSSv3 score | 9.0 High |
List 1: Ricoh products affected by this vulnerability
| Product/service | Link to details |
| M C240FW | Affected. For details, please refer to the following URL. https://www.ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000067-2023-000002 |
| P C200W | Affected. For details, please refer to the following URL. https://www.ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000065-2023-000002 |
Contact
Please contact your local Ricoh representative or dealer if you have any queries.
History:
2023-02-21T14:00:00+09:00 : 1.00E Initial public release
News & Events
Keep up to date
- 10Aug
Quocirca again names Ricoh a Print Security Leader for its "device-agnostic" managed security services
- 04Aug
Ricoh named a Leader in the 2026 Worldwide Laser Production Printers by IDC MarketScape
- 23Jul
Ricoh accelerates customers’ decarbonisation through additional Innovation Fund investment in ASUENE
- 24Jun
Ricoh earns place on TIME World’s Most Sustainable Companies 2026 list for third consecutive year