Streamline NX Client < 3.4.3.2 / 3.5.x < 3.5.1.202 / 3.6.x < 3.6.2.2 RCE (2024-000004)

The version of Streamline NX Client installed on the remote host is prior to 3.231.0, 3.4.3.2, 3.5.1.202 or 3.6.2.2. It is, therefore, affected by a vulnerability as referenced in the 2024-000004 advisory. - Improper restriction of communication channel to intended endpoints issue exists in Ricoh...

CVE-2024-36252: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed...

CVE-2024-37387: Use of Potentially Dangerous Function

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, files in the PC where the product is installed may be altered...

CVE-2024-37124: Improper Control of Generation of Code

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, an attacker may create an arbitrary file in the PC where the product is installed...

PT-2024-27320

Name of the Vulnerable Software and Affected Versions Ricoh Streamline NX PC Client affected versions not specified Description The issue is related to the use of a potentially dangerous function in the software. If exploited, an attacker may be able to create an arbitrary file on the PC where th...

CVE-2024-36480: Use of Hard-coded Credentials

Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC...

JVN#00442488: Multiple vulnerabilities in Ricoh Streamline NX PC Client

Ricoh Streamline NX PC Client provided by RICOH COMPANY, LTD. contains multiple vulnerabilities listed below. Improper restriction of communication channel to intended endpoints CWE-923 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Base Score 6.3 CVE-2024-36252 ricoh-2024-000004 Use of hard-coded...

CVE-2019-20001: Undefined Security Weakness

An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to escalate local privileges...

PT-2020-10314

Name of the Vulnerable Software and Affected Versions RICOH Streamline NX Client Tool affected versions not specified RICOH Streamline NX PC Client affected versions not specified Description An issue was discovered that allows attackers to escalate local privileges. Recommendations At the moment...