CVE-2025-48825

State: Published
Severity: 2.0 Low
Published: Jun 13, 2025
Updated: Jun 23, 2025
Reserved: Jun 12, 2025

Description

RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who can conduct a man-in-the-middle attack to eavesdrop upgrade requests and execute a malicious DLL with custom code.

Scores

CVSS	Score	Vector	Source
4.0	2.0 Low	CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N	jpcert
3.0	2.5 Low	CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N	jpcert

Weaknesses

CWE-348 Use of less trusted source

Affected Products

Product	Versions
RICOH Streamline NX V3 PC ClientRicoh Company, Ltd.	versions 3.5.0 to 3.7.0Affected

References

https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000006
https://jvn.jp/en/jp/JVN27937557/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.