CVE-2021-33945

RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpa_supplicant.conf. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.85% chance of exploitation in the next 30 days, 79th percentile

Published

2022-02-15

Updated

2024-08-04

Proof-of-concept exploits (1)

• Ainevsia/CVE-Request/tree/main/Ricoh/14★ · 2022-05-22

Security advisories

• https://www.ricoh.com/info/2022/0228_1

References

• CVE Record
• NVD entry

Related

• CVE-2021-37354
• CVE-2021-46262
• CVE-2021-46263
• CVE-2021-46264
• CVE-2021-46265
• CVE-2021-46321