CVE编号
CVE-2018-16188利用情况
暂无补丁情况
N/A披露时间
2019-01-10漏洞描述
RICOH交互式白板D2200 V1.3至V2.2，D5500 V1.3至V2.2，D5510 V1.3至V2.2中的SQL注入漏洞，显示版本为RICOH交互式白板控制器Type1 V1.3至V2。附带2个（D5520，D6500，D6510，D7500，D8400），附带RICOH交互式白板控制器Type2 V3.0到V3.1.10137.0的显示器版本（D5520，D6510，D7500，D8400）允许远程攻击者执行任意SQL通过未指定的向量命令。<br>解决建议
厂商已发布了漏洞修复程序，请及时关注更新：https://www.ricoh.com/info/2018/1127_1.html
参考链接 |
|
|---|---|
| https://jvn.jp/en/jp/JVN55263945/index.html | |
| https://www.ricoh.com/info/2018/1127_1.html |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d2200_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d5500_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d5510_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d5520_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d5520_firmware | * |
From (including) 3.0 |
Up to (including) 3.1.10137.0 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d6500_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d6510_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d6510_firmware | * |
From (including) 3.0 |
Up to (including) 3.1.10137.0 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d7500_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d7500_firmware | * |
From (including) 3.0 |
Up to (including) 3.1.10137.0 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d8400_firmware | * |
From (including) 1.3 |
Up to (including) 2.2 |
||||
| 运行在以下环境 | |||||||||
| 系统 | ricoh | d8400_firmware | * |
From (including) 3.0 |
Up to (including) 3.1.10137.0 |
||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d2200 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d5500 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d5510 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d5520 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d6500 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d6510 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d7500 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | ricoh | d8400 | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 无
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 高
- 完整性 高
还没有评论，来说两句吧...