by Kastro
Paper/Archive/CVE-2024-37124

CVE-2024-37124

RICOH COMPANY, LTD. Ricoh Streamline NX PC Client — Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client.

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 43.3.433 × 208.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, an attacker may create an arbitrary file in the PC where the product is installed.

Affected

ProductAffectedFixed inSource
Ricoh Streamline NX PC Clientver.3.2.1.19–CNA
Ricoh Streamline NX PC Client ver.3.3.1.3–CNA
Ricoh Streamline NX PC Client ver.3.3.2.201–CNA
Ricoh Streamline NX PC Client ver.3.4.3.1–CNA
Ricoh Streamline NX PC Client ver.3.5.1.201 (ver.3.5.1.200op1)–CNA
Ricoh Streamline NX PC Client ver.3.6.100.53–CNA
Ricoh Streamline NX PC Client and ver.3.6.2.1–CNA
streamline_nx_pc_clientver.3.2.1.19–CISA-ADP
streamline_nx_pc_clientver.3.3.1.3–CISA-ADP
streamline_nx_pc_clientver.3.3.2.201–CISA-ADP
streamline_nx_pc_clientver.3.4.3.1–CISA-ADP
streamline_nx_pc_clientver.3.5.1.201\/ver.3.5.1.200op1\/–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000006refjvn.jp/en/jp/JVN00442488