CVE-2024-36252

State: Published
Severity: 6.3 Medium
Published: Jun 19, 2024
Updated: Aug 2, 2024
Reserved: Jun 4, 2024

Description

Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed.

Scores

CVSS	Score	Vector	Source
3.1	6.3 Medium	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L	CISA-ADP

Weaknesses

CWE-923 Improper Restriction of Communication Channel to Intended Endpoints

Affected Products

Product	Versions
Ricoh Streamline NX PC ClientRICOH COMPANY, LTD	ver.3.6.x and earlierAffected

References

https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000004
https://jvn.jp/en/jp/JVN00442488/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.