CVE-2025-36506
6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Summary
External control of file name or path issue exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If an attacker sends a specially crafted request, arbitrary files in the file system can be overwritten with log data.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Ricoh Company, Ltd. | RICOH Streamline NX V3 PC Client | versions 3.5.0 to 3.242.0 | affected |
Weaknesses
- CWE-73: External control of file name or path
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: partial
References
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000004
- https://jvn.jp/en/jp/JVN27937557/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.