by Kastro
Paper/Archive/CVE-2025-46783

CVE-2025-46783

Ricoh Company, Ltd. RICOH Streamline NX V3 PC Client — Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0.

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 59.2.592 × 2011.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is running by tampering with specific files used on the product.

Affected

ProductAffectedFixed inSource
RICOH Streamline NX V3 PC Clientversions 3.5.0 to 3.242.0–CNA

Scores by source

jpcert (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
jpcert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000005refjvn.jp/en/jp/JVN27937557