What is CVE-2024-36480?

CVE-2024-36480 is a critical-severity vulnerability in Cve-2024-36480 Ricoh Streamline Nx Pc Client, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2024-06-19.

How severe is CVE-2024-36480?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Cve-2024-36480 Ricoh Streamline Nx Pc Client

CVE-2024-36480

Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC.

EPSS: 0.004 (35.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cve-2024-36480 Ricoh Streamline Nx Pc Client — versions ver.3.7.2 and earlier

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

Frequently asked questions

What is CVE-2024-36480?: CVE-2024-36480 is a critical-severity vulnerability in Cve-2024-36480 Ricoh Streamline Nx Pc Client, classified under Use of Hard-coded Credentials. CVSS score: 9.8/10. Published 2024-06-19.
How severe is CVE-2024-36480?: Critical severity. CVSS v3 base score is 9.8 out of 10.