CVE-2022-43969

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

Ricoh mp_c4504ex devices with firmware 1.06 mishandle credentials.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-522

Affected software

No affected versions have been published.

Timeline

Published
Feb 16, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-43976.5A vulnerability was found in morontt zend-blog-number-2. It has been classified as problematic. Affected is an unknown function of the file CVE-2022-439707.2A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A stack-based buffer oveCVE-2022-439717.2An arbitrary code exection vulnerability exists in Linksys WUMC710 Wireless-AC Universal Media Connector with firmware <= 1.0.02 (build3). TCVE-2022-439727.5A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer CVE-2022-439737.2An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. The Check_TSSCVE-2022-439749.8MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS MessageCVE-2022-439757.5An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. A vulnerability in the webCVE-2022-439769.8An issue was discovered in FC46-WebBridge on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. Direct access to the API iCVE-2022-439779.8An issue was discovered on GE Grid Solutions MS3000 devices before 3.7.6.25p0_3.2.2.17p0_4.7p0. The debug port accessible via TCP (a qconn sCVE-2022-439783.7There is an improper authentication vulnerability in Pandora FMS v764. The application verifies that the user has a valid session when he isCVE-2022-439799.8There is a Path Traversal that leads to a Local File Inclusion in Pandora FMS v764. A function is called to check that the parameter that thCVE-2022-43987.8Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0.