CVE-2024-47939

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploited, receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. As for the details of affected product names and versions, refer to the information provided by the vendors under [References].

Metrics

CVSS 3.0 7.7/10CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Weakness enumeration

CWE-121

Affected software

Vendor	Product	Versions
Ricoh Company, Ltd.	Multiple laser printers and MFPs which implement Web Image Monitor	see the information provided by the vendor
KONICA MINOLTA, INC.	Multiple MFPs which implement Web Image Monitor	see the information provided by the vendor

References

Timeline

Published: Nov 1, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-47948.8A vulnerability has been found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this vulnerability CVE-2024-479407.8A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bound CVE-2024-479417.8A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bound CVE-2024-479427.3A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications suffer from a DLL hijac CVE-2024-479439.8The firmware upgrade function in the admin web interface of the Rittal IoT Interface & CMC III Processing Unit devices checks if the patch CVE-2024-479446.8The device directly executes .patch firmware upgrade files on a USB stick without any prior authentication in the admin interface. This lead CVE-2024-479459.8The devices are vulnerable to session hijacking due to insufficient entropy in its session ID generation algorithm. The session IDs are pr CVE-2024-479467.2If the attacker has access to a valid Poweruser session, remote code execution is possible because specially crafted valid PNG files with in CVE-2024-479474.7Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other CVE-2024-479487.5In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups CVE-2024-479497.5In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location CVE-2024-47958.8A vulnerability was found in Campcodes Online Laundry Management System 1.0 and classified as critical. Affected by this issue is some unkno