Update: Notice on potential impact of Apache Log4j vulnerability towards Ricoh products and services
Last updated: December 17, 2021
First published: December 15, 2021
Ricoh is aware of the reported Apache Log4j remote code execution vulnerability (CVE-2021-44228). Apache Log4j is an open-source logging JAVA-based library offered by Apache Software Foundation. Ricoh is currently investigating if any Ricoh products and services may be potentially impacted by this vulnerability.
Servers operating with Apache Log4j are potentially threatened, allowing a third party to remotely access the server and execute remote code by sending modified data to exploit this vulnerability.
Ricoh confirmed the following products and services that it develops, manufactures, and offers are not impacted by this vulnerability. Ricoh products and services not listed are under ongoing investigation.
| Office Products | Multifunction Printers/Copiers | Color MFP |
|---|---|---|
| Black & White MFP | ||
| Wide Format MFP | ||
| Printers | Color Laser Printers | |
| Black & White Laser Printers | ||
| Printer based MFP | ||
| Gel Jet Printers | ||
| Handy Printers | ||
| FAX | ||
| Digital Duplicators | ||
| Projectors | ||
| Video Conferencing | ||
| Interactive Whiteboards | ||
| Software & Solutions | @Remote Connector NX | |
| Card Authentication Package Series | ||
| Certificate Enrolment Service | ||
| Device Manager NX Accounting | ||
| Device Manager NX Enterprise | ||
| Device Manager NX Lite | ||
| Device Manager NX Pro | ||
| DocuWare | ||
| Enhanced Locked Print Series | ||
| GlobalScan NX | ||
| Intelligent Barcode Solution | ||
| myPrint | ||
| Printer Driver Packager NX | ||
| RICOH Print Management Cloud | ||
| Ricoh Smart Integration (RSI) applications | ||
| Ricoh Smart Integration (RSI) Platform and its applications | ||
| RICOH Streamline NX V2 | ||
| RICOH Streamline NX V3 | ||
| Scan Workflow Navigator | ||
| Streamline NX Share | ||
| Commercial & Industrial Printing | Garment Printers | |
Production Printers were listed as not being impacted as of December 16, however, investigation is ongoing. Updates will be provided as they are available.
Ricoh is committed to supporting customers across the globe, enabling them to operate Ricoh products equipped with the latest security settings. Additional updates on impacted Ricoh products and services and related countermeasures will be provided promptly on this page as they become available.