CVE-2022-43969

Name: CVE-2022-43969
Creator: NVD / NIST
Published: 2023-02-16T14:15:17.22+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

CRITICALCVSS 9.1/10EPSS 0.54%

Last modified Jun 17, 2026

CVE-2022-43969 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.. EPSS estimates a 0.54% chance of exploitation in the next 30 days.

Description

Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.

Metrics

CVSS 3.1

9.1/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS Probability

0.54%

41.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-522

Affected Software

Vendor	Product	Versions
Ricoh	Mp C307 Firmware	<= 1.14
Ricoh	Mp C407 Firmware	<= 1.14
Ricoh	Mp C406 Firmware	<= 1.20
Ricoh	Mp C306 Firmware	<= 1.20
Ricoh	Im Cw2200 Firmware	<= 1.01
Ricoh	Im Cw2201 Firmware	<= 1.11
Ricoh	Mp 402spf Firmware	<= 1.12
Ricoh	Mp C2003 Smart Operation Panel Firmware	<= 1.14
Ricoh	Mp C2503 Smart Operation Panel Firmware	<= 1.14
Ricoh	Mp C2003 Firmware	<= 1.17
Ricoh	Mp C2503 Firmware	<= 1.17
Ricoh	Mp C4503 Firmware	<= 1.12
Ricoh	Mp C5503 Firmware	<= 1.12
Ricoh	Mp C6003 Firmware	<= 1.12
Ricoh	Mp C3003 Firmware	<= 1.19
Ricoh	Mp C3503 Firmware	<= 1.19
Ricoh	Mp C4503 Smart Operation Panel Firmware	<= 2.17
Ricoh	Mp C5503 Smart Operation Panel Firmware	<= 2.17
Ricoh	Mp C6003 Smart Operation Panel Firmware	<= 2.17
Ricoh	Mp C3003 Smart Operation Panel Firmware	<= 2.15
Ricoh	Mp C3503 Smart Operation Panel Firmware	<= 2.15
Ricoh	Mp C2004ex Firmware	<= 1.15
Ricoh	Mp C2504ex Firmware	<= 1.15
Ricoh	Mp C4504ex Firmware	<= 1.15
Ricoh	Mp C5504ex Firmware	<= 1.15
Ricoh	Mp C6004ex Firmware	<= 1.15
Ricoh	Mp C3004ex Firmware	<= 1.15
Ricoh	Mp C3504ex Firmware	<= 1.15
Ricoh	Pro C5300s Firmware	<= 1.07
Ricoh	Pro C5310s Firmware	<= 1.07
Ricoh	M C2001 Firmware	<= 1.01
Ricoh	Im C530f Firmware	<= 6.17
Ricoh	Im C530fb Firmware	<= 6.17
Ricoh	Im 350f Firmware	<= 1.10
Ricoh	Im 350 Firmware	<= 1.10
Ricoh	Im 430f Firmware	<= 1.10
Ricoh	Im 430fb Firmware	<= 1.10
Ricoh	Mp 305\+ Firmware	<= 1.12
Ricoh	Im 550f Firmware	<= 5.02
Ricoh	Im 600f Firmware	<= 5.02
Ricoh	Im 600srf Firmware	<= 5.02
Ricoh	Im 7000 Firmware	<= 2.02
Ricoh	Im 8000 Firmware	<= 2.02
Ricoh	Im 9000 Firmware	<= 2.02
Ricoh	Mp 2555 Firmware	<= 1.18
Ricoh	Mp 3055 Firmware	<= 1.18
Ricoh	Mp 3555 Firmware	<= 1.18
Ricoh	Mp 4055 Firmware	<= 1.18
Ricoh	Mp 5055 Firmware	<= 1.18
Ricoh	Mp 6055 Firmware	<= 1.18

Showing 50 of 77 affected configurations. See NVD for the full list.

References

https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2022-000002Vendor Advisory
https://www.ricoh.com/software/dev_soft_managerProduct
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2022-000002Vendor Advisory
https://www.ricoh.com/software/dev_soft_managerProduct

Timeline

Published: Feb 16, 2023
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2022-43969?

Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.

How severe is CVE-2022-43969?

CVE-2022-43969 has a CVSS score of 9.1/10 (CRITICAL severity). The EPSS model estimates a 0.54% probability of exploitation in the next 30 days.

How do I fix CVE-2022-43969?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-43969?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST