CVE-2019-14308

Several Ricoh printers have multiple buffer overflows parsing LPD packets, which allow an attacker to cause a denial of service or code execution via crafted requests to the LPD service. Affected firmware versions depend on the printer models. One affected configuration is cpe:2.3:o:ricoh:sp_c250dn_firmware:-:*:*:*:*:*:*:* up to (including) 1.06 running on cpe:2.3:o:ricoh:sp_c250dn:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252dn:-:*:*:*:*:*:*:*. Another affected configuration is cpe:2.3:o:ricoh:sp_c250sf_firmware:-:*:*:*:*:*:*:* up to (including) 1.12 running on cpe:2.3:o:ricoh:sp_c250sf:-:*:*:*:*:*:*:*, cpe:2.3:o:ricoh:sp_c252sf:-:*:*:*:*:*:*:*.

• CWE-119

• http://jvn.jp/en/jp/JVN11708203/index.html
• https://www.ricoh-usa.com/en/support-and-downloadProduct
• https://www.ricoh.com/info/2019/0823_1/Vendor Advisory
• http://jvn.jp/en/jp/JVN11708203/index.html
• https://www.ricoh-usa.com/en/support-and-downloadProduct
• https://www.ricoh.com/info/2019/0823_1/Vendor Advisory

Published

Aug 26, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14302On Ricoh SP C250DN 1.06 devices, a debug port can be used.6.8
• CVE-2019-14303Ricoh SP C250DN 1.05 devices allow denial of service (issue …7.5
• CVE-2019-14304Ricoh SP C250DN 1.06 devices allow CSRF.8.8
• CVE-2019-14305Several Ricoh printers have multiple buffer overflows parsin…8.8
• CVE-2019-14306Ricoh SP C250DN 1.06 devices have Incorrect Access Control (…7.5
• CVE-2019-14307Several Ricoh printers have multiple buffer overflows parsin…8.8
• CVE-2019-14309Ricoh SP C250DN 1.05 devices have a fixed password. FTP serv…7.5
• CVE-2019-1431Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-14310Ricoh SP C250DN 1.05 devices allow denial of service (issue …9.8
• CVE-2019-14312Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclus…
• CVE-2019-14313A SQL injection vulnerability exists in the 10Web Photo Gall…9.8
• CVE-2019-14314A SQL injection vulnerability exists in the Imagely NextGEN …