CVE-2024-36480

State: Published
Severity: 9.8 Critical
Published: Jun 19, 2024
Updated: Aug 2, 2024
Reserved: Jun 4, 2024

Description

Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-798 Use of Hard-coded Credentials

Affected Products

Product	Versions
Ricoh Streamline NX PC ClientCVE-2024-36480	ver.3.7.2 and earlierAffected

References

https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005
https://jvn.jp/en/jp/JVN00442488/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.