What is CVE-2024-37124?

CVE-2024-37124 is a critical-severity vulnerability in Ricoh Company, Ltd. Streamline Nx Pc Client, classified under Code Injection. CVSS score: 9.8/10. Published 2024-06-19.

How severe is CVE-2024-37124?

Critical severity. CVSS v3 base score is 9.8 out of 10.

RCE in Ricoh Company, Ltd. Streamline Nx Pc Client

CVE-2024-37124

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, an attacker may create an arbitrary file in the PC where the product is installed.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.005 (40.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ricoh Company, Ltd. Streamline Nx Pc Client — versions ver.3.2.1.19, ver.3.3.1.3, ver.3.3.2.201

Weakness classification (CWE)

CWE-94 — Code Injection

References

Frequently asked questions

What is CVE-2024-37124?: CVE-2024-37124 is a critical-severity vulnerability in Ricoh Company, Ltd. Streamline Nx Pc Client, classified under Code Injection. CVSS score: 9.8/10. Published 2024-06-19.
How severe is CVE-2024-37124?: Critical severity. CVSS v3 base score is 9.8 out of 10.