A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service.
The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
None
No data leak
Integrity
None
No data modification
Availability
High
Complete denial of service
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products
ricoh:sp 330dn
ricoh:aficio sp 3500sf
ricoh:sp c252sf
ricoh:sp 221
References 9
https://github.com/xiaobor123/vuls-find-VxWorks/blob/main/RICOH/03-SP330DN-mult…
cna@vuldb.com
https://github.com/xiaobor123/vuls-find-VxWorks/tree/main/RICOH/03-SP330DN-mult…
cna@vuldb.com
https://vuldb.com/cve/CVE-2026-101040
cna@vuldb.com
https://vuldb.com/submit/927274
cna@vuldb.com
https://vuldb.com/submit/927275
cna@vuldb.com
https://vuldb.com/submit/927289
cna@vuldb.com
https://vuldb.com/submit/927478
cna@vuldb.com
https://vuldb.com/vuln/410908
cna@vuldb.com
https://vuldb.com/vuln/410908/cti
cna@vuldb.com