CVE-2018-16187

Name of the Vulnerable Software and Affected Versions RICOH Interactive Whiteboard D2200 versions 1.3 through 2.2 RICOH Interactive Whiteboard D5500 versions 1.3 through 2.2 RICOH Interactive Whiteboard D5510 versions 1.3 through 2.2 RICOH Interactive Whiteboard Controller Type1 versions 1.3 through 2.2 RICOH Interactive Whiteboard Controller Type2 versions 3.0 through 3.1.10137.0

Description The issue allows man-in-the-middle attackers to eavesdrop on encrypted communication due to the lack of server certificate verification.

Recommendations For RICOH Interactive Whiteboard D2200 versions 1.3 through 2.2, update the software to verify server certificates. For RICOH Interactive Whiteboard D5500 versions 1.3 through 2.2, update the software to verify server certificates. For RICOH Interactive Whiteboard D5510 versions 1.3 through 2.2, update the software to verify server certificates. For RICOH Interactive Whiteboard Controller Type1 versions 1.3 through 2.2, update the controller to verify server certificates. For RICOH Interactive Whiteboard Controller Type2 versions 3.0 through 3.1.10137.0, update the controller to verify server certificates.