CVE-2023-30759

2023-06-1900:00:00

jpcert

www.cve.org

cve-2023-30759

driver installation package

printer driver packager nx

modification detection

unexpected process

administrative privilege

non-administrative user

arbitrary program

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modification and may spawn an unexpected process with the administrative privilege. If a non-administrative user modifies the driver installation package and runs it on the target PC, an arbitrary program may be executed with the administrative privilege.

CNA Affected

[
  {
    "vendor": "Ricoh Company, Ltd.",
    "product": "Printer Driver Packager NX",
    "versions": [
      {
        "version": "v1.0.02 to v1.1.25",
        "status": "affected"
      }
    ]
  }
]