CVE-2022-36403

🗓️ 08 Sep 2022 07:10:44Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 53 Views

Untrusted search path vuln in installer of Device Software Manager prior to Ver.2.20.3.0 allows attacker to gain privs via Trojan horse DLL

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-36403	8 Sep 202208:15	–	attackerkb
Circl	CVE-2022-36403	8 Sep 202212:15	–	circl
CNNVD	Ricoh Device Software Manager 代码问题漏洞	29 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-36403	8 Sep 202207:10	–	cvelist
EUVD	EUVD-2022-39116	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#44721267: Installer of Ricoh Device Software Manager may insecurely load Dynamic Link Libraries	29 Aug 202200:00	–	jvn
Japan Vulnerability Notes	Installer of Ricoh Device Software Manager may insecurely load Dynamic Link Libraries	29 Aug 202206:57	–	jvn
NVD	CVE-2022-36403	8 Sep 202208:15	–	nvd
Prion	Design/Logic Flaw	8 Sep 202208:15	–	prion
Positive Technologies	PT-2022-4667 · Unknown · Device Software Manager	29 Aug 202200:00	–	ptsecurity

NVD

Vulners

Node

ricoh device_software_managerRange<2.20.3.0

[
  {
    "product": "Installer of Device Software Manager",
    "vendor": "RICOH COMPANY, LTD.",
    "versions": [
      {
        "status": "affected",
        "version": "prior to Ver.2.20.3.0"
      }
    ]
  }
]