7.8

CVE-2019-19363

Exploit
An issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to 2020 that allows attackers local privilege escalation. Affected drivers and versions are: PCL6 Driver for Universal Print - Version 4.0 or later PS Driver for Universal Print - Version 4.0 or later PC FAX Generic Driver - All versions Generic PCL5 Driver - All versions RPCS Driver - All versions PostScript3 Driver - All versions PCL6 (PCL XL) Driver - All versions RPCS Raster Driver - All version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ricoh ≫ Generic Pcl5 Driver Version-
Ricoh ≫ Pcl6 Driver For Universal Print Version >= 4.0 < 4.26
Ricoh ≫ Postscript3 Driver Version-
Ricoh ≫ Ps Driver For Universal Print Version >= 4.0 < 4.26
Ricoh ≫ Rpcs Driver Version-
Ricoh ≫ Rpcs Raster Driver Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.57% 0.904
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

http://jvn.jp/en/jp/JVN15697526/index.html
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/156082/Ricoh-Printer-Driver-Local-Privilege-Escalation.html
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/156251/Ricoh-Driver-Privilege-Escalation.html
Third Party Advisory
Exploit
VDB Entry
http://seclists.org/fulldisclosure/2020/Jan/34
Third Party Advisory
Mailing List
https://www.ricoh.com/info/2020/0122_1/
Vendor Advisory