{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000061.html",
  "dc:date": "2024-06-18T14:56+09:00",
  "dcterms:issued": "2024-06-18T14:56+09:00",
  "dcterms:modified": "2024-06-18T14:56+09:00",
  "description": "Ricoh Streamline NX PC Client provided by RICOH COMPANY, LTD. contains multiple vulnerabilities listed below.\r\n\r\n* [ricoh-2024-000004] Improper restriction of communication channel to intended endpoints (CWE-923) - CVE-2024-36252\r\n* [ricoh-2024-000005] Use of hard-coded credentials (CWE-798) - CVE-2024-36480\r\n* [ricoh-2024-000006] Use of potentially dangerous function (CWE-676) - CVE-2024-37124\r\n* [ricoh-2024-000007] Use of potentially dangerous function (CWE-676) - CVE-2024-37387\r\n\r\nCVE-2024-36252\r\nCai, Qi Qi of Siemens China Cybersecurity Testing Center - Shadowless Lab reported this vulnerability to RICOH COMPANY, LTD. and coordinated. After the coordination was completed, RICOH COMPANY, LTD. reported the case to IPA to notify users of the solution through JVN.\r\n\r\nCVE-2024-36480, CVE-2024-37124, CVE-2024-37387\r\nAbian Blome of Siemens Energy reported these vulnerabilities to RICOH COMPANY, LTD. and coordinated. After the coordination was completed, RICOH COMPANY, LTD. reported the case to IPA to notify users of the solution through JVN.",
  "link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000061.html",
  "sec:cpe": {
    "#text": "cpe:/a:ricoh:streamline_nx_pc_client",
    "@product": "RICOH Streamline NX PC Client",
    "@vendor": "Ricoh Co., Ltd",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "6.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2024-000061",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN00442488/index.html",
      "@id": "JVN#00442488",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-36252",
      "@id": "CVE-2024-36252",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-36480",
      "@id": "CVE-2024-36480",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-37124",
      "@id": "CVE-2024-37124",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-37387",
      "@id": "CVE-2024-37387",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Multiple vulnerabilities in Ricoh Streamline NX PC Client"
}