CVE-2024-37124

2024-06-1906:40:52

jpcert

www.cve.org

vulnerability

ricoh streamline nx

arbitrary file

0.0004 Low

EPSS

Percentile

9.1%

JSON

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, an attacker may create an arbitrary file in the PC where the product is installed.

CNA Affected

[
  {
    "vendor": "RICOH COMPANY, LTD.",
    "product": "Ricoh Streamline NX PC Client",
    "versions": [
      {
        "version": "ver.3.2.1.19",
        "status": "affected"
      },
      {
        "version": " ver.3.3.1.3",
        "status": "affected"
      },
      {
        "version": " ver.3.3.2.201",
        "status": "affected"
      },
      {
        "version": " ver.3.4.3.1",
        "status": "affected"
      },
      {
        "version": " ver.3.5.1.201 (ver.3.5.1.200op1)",
        "status": "affected"
      },
      {
        "version": " ver.3.6.100.53",
        "status": "affected"
      },
      {
        "version": " and ver.3.6.2.1",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN00442488/

www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000006

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVELIST:CVE-2024-37124