Description
An issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to 2020 that allows attackers local privilege escalation. Affected drivers and versions are: PCL6 Driver for Universal Print - Version 4.0 or later PS Driver for Universal Print - Version 4.0 or later PC FAX Generic Driver - All versions Generic PCL5 Driver - All versions RPCS Driver - All versions PostScript3 Driver - All versions PCL6 (PCL XL) Driver - All versions RPCS Raster Driver - All version
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Ricoh Driver Privilege Escalation
exploit/windows/local/ricoh_driver_privesc
Exploit-DB 2
- Ricoh Driver - Privilege Escalation (Metasploit) EDB-48036 · local · Feb 10, 2020 · verified
- Ricoh Printer Drivers - Local Privilege Escalation EDB-47962 · local · Jan 22, 2020
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- https://www.ricoh.com/info/2020/0122_1/
- 20200124 CVE-2019-19363 - Local Privilege Escalation in many Ricoh Printer Drivers for Windows mailing-list
- http://packetstormsecurity.com/files/156082/Ricoh-Printer-Driver-Local-Privilege-Escalation.html
- http://packetstormsecurity.com/files/156251/Ricoh-Driver-Privilege-Escalation.html
- JVN#15697526 third-party-advisory