CVE编号
CVE-2018-16187利用情况
暂无补丁情况
N/A披露时间
2019-01-10漏洞描述
RICOH交互式白板D2200 V1.3至V2.2，D5500 V1.3至V2.2，D5510 V1.3至V2.2，附带RICOH交互式白板控制器Type1 V1.3至V2.2的显示器版本（D5520）附带RICOH交互式白板控制器Type2 V3.0至V3.1.10137.0的显示器版本（D5520，D6510，D7500，D8400）不验证其服务器证书，这允许人员 - 中间攻击者对加密通信进行反思。<br>解决建议
目前厂商已发布升级补丁以修复漏洞，补丁获取链接:https://www.ricoh.com/info/2018/1127_1.html
参考链接 |
|
|---|---|
| https://jvn.jp/en/jp/JVN55263945/index.html | |
| https://www.ricoh.com/info/2018/1127_1.html |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d2200_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d5500_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d5510_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d5520_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d5520_firmware | * |
From (including) 3.0 |
Up to (including) 3.1.10137.0 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d6500_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d6510_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d6510_firmware | * |
From (including) 3.0 |
Up to (including) 3.1.10137.0 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d7500_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d7500_firmware | * |
From (including) 3.0 |
Up to (including) 3.1.10137.0 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d8400_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d8400_firmware | * |
From (including) 3.0 |
Up to (including) 3.1.10137.0 |
||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d2200 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d5500 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d5510 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d5520 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d6500 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d6510 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d7500 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d8400 | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 高
- 权限要求 无
- 影响范围 未更改
- 用户交互 无
- 可用性 无
- 保密性 高
- 完整性 无
还没有评论，来说两句吧...