Update: Notice on Ripple20 Treck TCP/IP Stack Potential Vulnerabilities
First published July 8, 2020
Date of current status September 25, 2020
Ricoh Company, Ltd.
Ricoh is aware of the security vulnerabilities known as the “Ripple20” disclosed by the JSOF on June 16, 2020. These vulnerabilities could potentially allow a remote hacker to trigger an information leak if a specific TCP/IP stack version is used.
We have confirmed that Ricoh A3-sized multi-function printers, production printers, digital duplicators, Interactive White Boards, projectors, and Unified Communication Systems do not use IP stack modules from Treck Inc. and Kasago of Zuken Elmic, Inc. The affected printers and A4-sized multi-function printers are confirmed only as following:
Model Name | CVEs |
SP 230SFNw SP 230DNw |
|
P 201W M 340W M 340FW (China model) |
|
Aficio SP 1210N |
|
Aficio GX e3300N Aficio GX e7700N |
|
THE POTENTIAL VULNERABILITY SUMMARY
The affected printer has potential vulnerabilities which may cause a device stall, memory destruction, and network failure, but won't be exploited by a springboard attack or cause confidential information leakage. Please visit here.
This vulnerability will not affect devices connected to the customer's network if the network is properly configured against external attacks. Ricoh recommends always using best practices for network protection, including:
- When the device is connected to a network, ensure that the network is protected, for example, by a firewall.
- Install the device in a secure network where users restrictions are in place.
RESOLUTION
Please download the updated firmware as below. Ricoh will release further updated firmware on the driver site as it is available.
Model Name | New Firmware Version | Solved CVEs |
Aficio GX e3300N | Ver.1.19 https://support.ricoh.com/bb/html/dr_ut_e/re2/model/gxe330/gxe330.htm | CVE-2020-11907 |
Aficio GX e7700N | Ver.1.05*1 https://support.ricoh.com/bb/html/dr_ut_e/rc2/model/gxe770/gxe770.htm | |
SP 230SFNw
SP 230DNw | Ver.1.05*2 https://support.ricoh.com/bb_v1oi/pub_e/oi/0001075/0001075678/VM0CA861X/M0CA8622_en.pdf |
|
M 340W
M 340FW P 201W (China Model) | Ver.1.01*2 https://support.ricoh.com/bb_v1oi/pub_e/oi/0001081/0001081286/VM0DA8706_01/M0DA8706_cn.pdf Note: The above firmware update guide is applied for P 201W as well. |
|
*2) updated September 25, 2020
The security and integrity of our customers' data and devices remain of utmost importance to Ricoh and will publish additional advisories for any other affected models, when applicable.
For further details on best practices for securely setting up your printer or MFP, please visit here.
|Om Ricoh|
Ricoh styrker digitale arbeidsplasser ved å bruke innovative teknologier og tjenester som gjør det mulig for enkeltpersoner å jobbe smartere fra hvor som helst.
Med kunnskap og organisatoriske evner opparbeidet gjennom sin 85-årige historie, er Ricoh en ledende leverandør av digitale tjenester, informasjonsadministrasjon og utskriftsløsninger designet for å støtte digital transformasjon og optimalisere forretningsytelsen.
Ricoh Group har hovedkontor i Tokyo og har store virksomheter over hele verden, og produktene og tjenestene deres når nå kunder i omtrent 200 land og regioner. I regnskapsåret som ble avsluttet mars 2022, hadde Ricoh Group et verdensomspennende salg på 1758 milliarder yen (ca. 14,5 milliarder USD).
For mer informasjon, vennligst besøk www.ricoh-europe.com
empty© 2022 RICOH COMPANY, LTD. Alle rettigheter forbeholdt. Alle refererte produktnavn er varemerker for deres respektive selskaper.
Mediekontakt:
Ricoh Europe PLC
Jack Gibson
E-post: media@ricoh-europe.com
Hjemmeside: www.ricoh-europe.com