CVE-2024-37124

State: Published
Severity: 9.8 Critical
Published: Jun 19, 2024
Updated: Aug 2, 2024
Reserved: Jun 3, 2024

Description

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, an attacker may create an arbitrary file in the PC where the product is installed.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-94 Improper Control of Generation of Code ('Code Injection')

Affected Products

Product	Versions
Ricoh Streamline NX PC ClientRICOH COMPANY, LTD.	ver.3.2.1.19Affected ver.3.3.1.3Affected ver.3.3.2.201Affected ver.3.4.3.1Affected ver.3.5.1.201 (ver.3.5.1.200op1)Affected ver.3.6.100.53Affected and ver.3.6.2.1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.