CVE-2021-33945 — CRITICAL (9.8)

Vulnerability Description

RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpa_supplicant.conf. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Ricoh	Sp 320Dn Firmware	1.06
Ricoh	Sp 320Dn	-
Ricoh	Sp 325Dnw Firmware	1.06
Ricoh	Sp 325Dnw	-
Ricoh	Sp 320Sn Firmware	1.06
Ricoh	Sp 320Sn	-
Ricoh	Sp 320Sfn Firmware	1.06
Ricoh	Sp 320Sfn	-
Ricoh	Sp 325Snw Firmware	1.06
Ricoh	Sp 325Snw	-
Ricoh	Sp 325Sfnw Firmware	1.06
Ricoh	Sp 325Sfnw	-
Ricoh	Sp 330Sn Firmware	1.06
Ricoh	Sp 330Sn	-
Ricoh	Aficio Sp 3500Sf Firmware	1.06
Ricoh	Aficio Sp 3500Sf	-
Ricoh	Sp 221S Firmware	1.06
Ricoh	Sp 221S	-
Ricoh	Sp 220Snw Firmware	1.06
Ricoh	Sp 220Snw	-

Related Weaknesses (CWE)

CWE-787

References

https://github.com/Ainevsia/CVE-Request/tree/main/Ricoh/1ExploitThird Party Advisory
https://www.ricoh.com/info/2022/0228_1/Vendor Advisory
https://github.com/Ainevsia/CVE-Request/tree/main/Ricoh/1ExploitThird Party Advisory
https://www.ricoh.com/info/2022/0228_1/Vendor Advisory

FAQ

What is CVE-2021-33945?

CVE-2021-33945 is a vulnerability with a CVSS score of 9.8 (CRITICAL). RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were di...

How severe is CVE-2021-33945?

CVE-2021-33945 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-33945?

Check the references section above for vendor advisories and patch information. Affected products include: Ricoh Sp 320Dn Firmware, Ricoh Sp 320Dn, Ricoh Sp 325Dnw Firmware, Ricoh Sp 325Dnw, Ricoh Sp 320Sn Firmware.