Vulnerability · Published Nov 1, 2024 · Assigned by jpcert
CVE-2024-47939
High 7.7
In plain English
A high-severity stack buffer overflow in Multiple MFPs which implement Web Image Monitor from KONICA MINOLTA, INC.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Official description
Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ricoh Company, Ltd. | Multiple laser printers and MFPs which implement Web Image Monitor | see the information provided by the vendor |
| KONICA MINOLTA, INC. | Multiple MFPs which implement Web Image Monitor | see the information provided by the vendor |
Weakness: CWE-121 · Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L