Printer Driver Privilege Escalation via Malicious Driver
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Ricoh Company, Ltd. | Multiple printer drivers | affected |
|
||||||
| KONICA MINOLTA JAPAN, INC. | Multiple printer drivers | affected |
|
No data.
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Konica Minolta | Multiple Printer Drivers |
|
||||||||
| Ricoh | Multiple Printer Drivers |
|
No CVSS v3.1
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.131% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Konica Minolta
Konica Minolta multiple Printer Drivers Ricoh Ricoh multiple Printer Drivers |
|
| Vendors & Products |
Konica Minolta
Konica Minolta multiple Printer Drivers Ricoh Ricoh multiple Printer Drivers |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Printer Driver Privilege Escalation via Malicious Driver |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability. If this vulnerability is exploited, an attacker who can log in to a computer running an affected printer driver could elevate privileges by using a specially crafted driver. | |
| Weaknesses | CWE-427 | |
| References |
| |
| Metrics |
cvssV3_0
|