Description
A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-09-28
Score: 7.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Apply Patch
AI Analysis

Impact

An unknown part of the HTTP multipart form‑data parser in several Ricoh devices can be manipulated to trigger a denial of service, likely through an infinite loop or resource exhaustion. The vulnerability is exploitable remotely and can be used by an attacker to crash or freeze the printer’s web interface, disrupting service. No evidence shows a path to code execution or data loss.

Affected Systems

The flaw affects Ricoh Aficio SP 3500SF, SP 221, SP 330DN and SP C252SF devices whose firmware versions are current up to 2026‑08‑13. These products have a web server component that parses multipart form‑data uploads. Users should verify their firmware stack to determine if they run a vulnerable version.

Risk and Exploitability

The CVSS score of 7.1 highlights a high impact on availability, while the EPSS score is not available but the exploit is publicly released. The vulnerability is listed as not in KEV, yet the lack of a vendor response increases the likelihood of attackers using the publicly available proof‑of‑concept. Remote exploitation requires only a crafted HTTP request and poses a significant risk to availability in environments where the printers are exposed to untrusted networks.

Generated by OpenCVE AI on September 28, 2026 at 12:25 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply any Ricoh firmware update released after 2026‑08‑13 that addresses the multipart parser issue.
  • Block or filter malformed multipart/form‑data requests at the perimeter network or use an intrusion‑detection system with signatures matching the known exploit.
  • Monitor printer CPU usage and service restarts, and enforce strict rate‑limiting on the device’s web‑interface endpoints to reduce the impact of potential DoS attempts.

Generated by OpenCVE AI on September 28, 2026 at 12:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 28 Sep 2026 11:15:00 +0000

Type Values Removed Values Added
Description A security flaw has been discovered in Ricoh SP 330DN, SP 221, SP C252SF and Aficio SP 3500SF up to 20260813. This affects an unknown part of the component HTTP Multipart Form-Data Parser. Performing a manipulation results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Title Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service
First Time appeared Ricoh
Ricoh aficio Sp 3500sf
Ricoh sp 221
Ricoh sp 330dn
Ricoh sp C252sf
Weaknesses CWE-404
CPEs cpe:2.3:a:ricoh:aficio_sp_3500sf:*:*:*:*:*:*:*:*
cpe:2.3:a:ricoh:sp_221:*:*:*:*:*:*:*:*
cpe:2.3:a:ricoh:sp_330dn:*:*:*:*:*:*:*:*
cpe:2.3:a:ricoh:sp_c252sf:*:*:*:*:*:*:*:*
Vendors & Products Ricoh
Ricoh aficio Sp 3500sf
Ricoh sp 221
Ricoh sp 330dn
Ricoh sp C252sf
References
Metrics cvssV2_0

{'score': 6.8, 'vector': 'AV:N/AC:L/Au:S/C:N/I:N/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 6.5, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Ricoh Aficio Sp 3500sf Sp 221 Sp 330dn Sp C252sf
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-01T14:13:40.410Z

Reserved: 2026-09-27T14:33:04.218Z

Link: CVE-2026-101040

cve-icon Vulnrichment

Updated: 2026-10-01T14:13:36.967Z

cve-icon NVD

Status : Deferred

Published: 2026-09-28T11:16:43.773

Modified: 2026-10-01T15:17:21.113

Link: CVE-2026-101040

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-28T16:15:03Z

Weaknesses
  • CWE-404

    Improper Resource Shutdown or Release