Vulnerability in Ricoh Company, Ltd Streamline Nx Pc Client

CVE-2024-36252

Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed.

EPSS: 0.002 (13.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2024-36252?
CVE-2024-36252 is a medium-severity vulnerability in Ricoh Company, Ltd Streamline Nx Pc Client, classified under CWE-923. CVSS score: 6.3/10. Published 2024-06-19.
How severe is CVE-2024-36252?
Medium severity. CVSS v3 base score is 6.3 out of 10.