Ricoh Company, Ltd. printers and MFPs do not implement controls to restrict SSH port forwarding. This means that an SSH connection to the device can be used to forward ports to arbitrary destinations, potentially enabling unauthorized network access or traffic relay through the printer. There is no information about active exploitation or specific vulnerabilities beyond this configuration issue.

The lack of SSH port forwarding restrictions could allow an attacker with SSH access to the printer to create tunnels to arbitrary network destinations. This may facilitate unauthorized network access or bypass network segmentation controls. However, no direct compromise of the printer or data leakage is described in the available information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, organizations should consider restricting SSH access to trusted users and networks, monitoring for unauthorized SSH connections, and applying network-level controls to limit potential misuse of port forwarding.