CVE-2018-18006

Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myPrint WSDL API, as demonstrated by discovering API secrets of related Google cloud printers, encrypted passwords of mail servers, and names of printed files.

• CWE-798

• http://packetstormsecurity.com/files/150399/Ricoh-myPrint-Hardcoded-Credentials-Information-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Nov/46Exploit, Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/150399/Ricoh-myPrint-Hardcoded-Credentials-Information-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/Nov/46Exploit, Mailing List, Third Party Advisory

Published

Dec 14, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17990An issue was discovered on D-Link DSL-3782 devices with firm…
• CVE-2018-17996LayerBB before 1.1.3 allows CSRF for adding a user via admin…
• CVE-2018-17997LayerBB 1.1.1 allows XSS via the titles of conversations (PM…
• CVE-2018-1800IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2…5.1
• CVE-2018-18004Incorrect Access Control in mod_inetd.cgi in VIVOTEK Network…
• CVE-2018-18005Cross-site scripting in event_script.js in VIVOTEK Network C…
• CVE-2018-18007atbox.htm on D-Link DSL-2770L devices allows remote unauthen…9.8
• CVE-2018-18008spaces.htm on multiple D-Link devices (DSL, DIR, DWR) allows…
• CVE-2018-18009dirary0.js on D-Link DIR-140L, DIR-640L devices allows remot…9.8
• CVE-2018-1801IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration…5.3
• CVE-2018-18013* Xen Mobile through 10.8.0 includes a service listening on …
• CVE-2018-18014* Lack of authentication in Citrix Xen Mobile through 10.8 a…4.8