The attack technique deployed by this issue is T1068 according to MITRE ATT&CK. The technical details are unknown and an exploit is not publicly available. The requirement for exploitation is a simple authentication. The identification of this vulnerability is CVE-2019-19363 since. The weakness was published by Alexander Pudwill as confirmed mailinglist post (Full-Disclosure).

Affected drivers and versions are: PCL6 Driver for Universal Print - Version 4.0 or later PS Driver for Universal Print - Version 4.0 or later PC FAX Generic Driver - All versions Generic PCL5 Driver - All versions RPCS Driver - All versions PostScript3 Driver - All versions PCL6 (PCL XL) Driver - All versions RPCS Raster Driver - All version The summary by CVE is:Īn issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to 2020 that allows attackers local privilege escalation. Impacted is confidentiality, integrity, and availability. The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Using CWE to declare the problem leads to CWE-269. The manipulation with an unknown input leads to a privileges management vulnerability.

This issue affects an unknown code block. A high score indicates an elevated risk to be targeted for this vulnerability.Ī vulnerability was found in Ricoh Printer Driver on Windows ( Printing Software) ( unknown version) and classified as critical. The CTI Interest Score identifies the interest of attackers and the security community for this specific vulnerability in real-time. Our Cyber Threat Intelligence team is monitoring different web sites, mailing lists, exploit markets and social media networks.

Ricoh lanier savin drivers