CVE-2024-36480
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| CVE-2024-36480 | Ricoh Streamline NX PC Client | ver.3.7.2 and earlier | affected |
Weaknesses
- Use of Hard-coded Credentials
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: total
CVE Program Container
Additional References
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005
- https://jvn.jp/en/jp/JVN00442488/
References
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005
- https://jvn.jp/en/jp/JVN00442488/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.