Notice of security investigation: Vulnerability (CVE-2022-43969) towards scanner or FAX-installed Ricoh products that may cause folder user password breach
Ricoh understands the importance of security and is committed to managing its products and services with the most advanced security technologies possible for its customers worldwide.
Ricoh is aware of the reported "Threat of folder user password breach"(CVE-2022-43969) that affects certain products and services that Ricoh develops, manufactures, and offers.
The user password for the folder, that is saved to a device with data transmission functionality, may be breached via a malicious ftp server by changing data transmission setting.
List 1 below shows the affected products and services. Ricoh offers measures detailed in the hyperlinked pages in the list.
Products and services not mentioned in List 1 are currently under security investigation. Please note that this page will be updated if there is change in status.
List 1: Ricoh products and services affected by this vulnerability
Please contact your local Ricoh representative or dealer if you have any queries.
Ricoh would like to thank Wouter Arts and Geert Braakhekke of WTH Security for reporting this vulnerability.