CVE-2025-57797

Summary

Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command.

Affected Software

Weaknesses

• CWE-266: Incorrect privilege assignment

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.pfu.ricoh.com/imaging/news/news20230606.html
• https://www.pfu.ricoh.com/scansnap/software/sshome/requirement.html
• https://jvn.jp/en/jp/JVN69684540/

• ←Previous
• Next→