by Kastro
Paper/Archive/CVE-2024-36480

CVE-2024-36480

CVE-2024-36480 Ricoh Streamline NX PC Client — Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier.

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 37.7.377 × 207.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC.

Affected

ProductAffectedFixed inSource
Ricoh Streamline NX PC Clientver.3.7.2 and earlier–CNA
streamline_nx_pc_client≤ 3.7.2–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005refjvn.jp/en/jp/JVN00442488