CVE-2024-36252

Published: Jun 19, 2024Modified: Jun 17, 2026Deferred

6.3

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 2.8 / Impact: 3.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed.

Related CWEs

CWE-923

Improper Restriction of Communication Channel to Intended Endpoints

The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.

References (4)

https://jvn.jp/en/jp/JVN00442488/

Source: vultures@jpcert.or.jp

https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000004

Source: vultures@jpcert.or.jp

https://jvn.jp/en/jp/JVN00442488/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000004

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.