CVE-2021-33945 - CVE House
Back to Database
Status published Critical CVE-2021-33945

RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN,...

Vulnerability Description

RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpa_supplicant.conf. This vulnerability allows attackers to cause a Denial of Service (DoS) via crafted overflow data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-33945

Credits & Attribution

No credits recorded in the NVD database.

References

More from ricoh

View All →
CVE-2022-43969
Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials....
Unknown 0
CVE-2019-7751
A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe...
High 7.5
CVE-2019-20001
An issue was discovered in RICOH Streamline NX Client Tool...
High 7.8
CVE-2019-19363
An issue was discovered in Ricoh (including Savin and Lanier)...
High 7.8
CVE-2019-18203
On the RICOH MP 501 printer, HTML Injection and Stored...
Medium 6.1

Affected Vendor

Affected Software

sp 320dn firmware, sp 325dnw firmware, sp 320sn firmware, sp 320sfn firmware, sp 325snw firmware, sp 325sfnw firmware, sp 330sn firmware, aficio sp 3500sf firmware, sp 221s firmware, sp 220snw firmware, sp 221snw firmware, sp 221sf firmware, sp 220sfnw firmware, sp 221sfnw firmware, m c2000 firmware, m c250fwb firmware, m c250fw firmware, sp c260sfnw firmware, sp c262sfnw firmware, sp c261sfnw firmware, sp c250sf firmware, sp c252sf firmware, p c300w firmware, p c301w firmware, sp c260dnw firmware, sp c262dnw firmware, sp c261dnw firmware, sp c250dn firmware, sp c252dn firmware, m 320 firmware, m 320fb firmware, m 320f firmware, m 2700 firmware, m 2701 firmware, sp 330sfn firmware, sp 3710sf firmware, sp 277snwx firmware, sp 277sfnwx firmware, sp 377snwx firmware, sp 377sfnwx firmware, sp 212sfnw firmware, sp 212sfw firmware, sp 212snw firmware, sp 212suw firmware, sp 213sfnw firmware, sp 213sfw firmware, sp 213snw firmware, sp 213suw firmware, sp 311sfnw firmware, sp 310sfnw firmware, sp 312sfnw firmware, p 310 firmware, p 311 firmware, sp 330dn firmware, sp 3710dn firmware, sp 220nw firmware, sp 221nw firmware, sp 277nwx firmware, sp 377dnwx firmware, sp 212nw firmware, sp 212w firmware, sp 213nw firmware, sp 213w firmware, sp 311dnw firmware, sp 310dnw firmware, sp 312dnw firmware
Vulnerable Versions:
1.06

Timeline

Official Publish: February 15th, 2022
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.