Notice on potential impact of a heap buffer overflow vulnerability in libwebp / libvpx towards IM C3010/C3510Ricoh understands the importance of security and is committed to managing its products and services with the most advanced security technologies possible for its customers worldwide.
Ricoh is aware of the reported "Heap buffer overflow vulnerability in libwebp / libvpx" (CVE-2023-4863/5217) affects IM C3010/C3510.
Ricoh offers measures detailed below.
Heap buffer overflow allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
| Products or Services | Components | Versions |
|---|---|---|
| IM C3010/C3510 | Firmware | CheetahSystem 1.08.1 or earlier |
How to view the firmware version:
1. Access Web Image Monitor from your browser.
https://"IP address or hostname of the device"
2. Log in with Administrator privileges.
3. Navigate to Device Management > Configuration > Device Settings > Firmware Update
Please download the updated firmware at the following links:
https://support.ricoh.com/bb/html/dr_ut_e/rc3/model/imc3010/imc3010.htm
Please contact your local Ricoh representative or dealer if you have any queries.
The distribution URL of this page:
https://www.ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000156-2023-000003 Please note that any copy or paraphrase of the text of this document that differs in content from the distribution URL link, or omits the URL, is an uncontrolled copy and may lack important information or contain factual errors.
