cvelistv5 - cve-2024-36480

CVE-2024-36480 (GCVE-0-2024-36480)

Vulnerability from cvelistv5 – Published: 2024-06-19 06:40 – Updated: 2024-08-02 03:37

Summary

Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC.

Severity ?

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

Use of Hard-coded Credentials

Assigner

jpcert

References

URL

Tags

	https://www.ricoh.com/products/security/vulnerabi…
	https://jvn.jp/en/jp/JVN00442488/

Impacted products

	Vendor	Product	Version
	CVE-2024-36480	Ricoh Streamline NX PC Client	Affected: ver.3.7.2 and earlier

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:ricoh:streamline_nx_pc_client:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "streamline_nx_pc_client",
            "vendor": "ricoh",
            "versions": [
              {
                "lessThanOrEqual": "3.7.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-36480",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-23T19:05:15.770286Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-798",
                "description": "CWE-798 Use of Hard-coded Credentials",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-23T19:05:23.166Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T03:37:05.325Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN00442488/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Ricoh Streamline NX PC Client",
          "vendor": "CVE-2024-36480",
          "versions": [
            {
              "status": "affected",
              "version": "ver.3.7.2 and earlier"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use of Hard-coded Credentials",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-19T06:40:46.619Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN00442488/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2024-36480",
    "datePublished": "2024-06-19T06:40:46.619Z",
    "dateReserved": "2024-06-04T09:09:47.217Z",
    "dateUpdated": "2024-08-02T03:37:05.325Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC.\"}, {\"lang\": \"es\", \"value\": \"Existe un problema de uso de credenciales codificadas en Ricoh Streamline NX PC Client versi\\u00f3n 3.7.2 y versiones anteriores. Si se explota esta vulnerabilidad, un atacante puede obtener la cuenta LocalSystem de la PC donde est\\u00e1 instalado el producto. Como resultado, es posible que se realicen operaciones no deseadas en la PC.\"}]",
      "id": "CVE-2024-36480",
      "lastModified": "2024-11-21T09:22:15.850",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 5.9}]}",
      "published": "2024-06-19T07:15:46.340",
      "references": "[{\"url\": \"https://jvn.jp/en/jp/JVN00442488/\", \"source\": \"vultures@jpcert.or.jp\"}, {\"url\": \"https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005\", \"source\": \"vultures@jpcert.or.jp\"}, {\"url\": \"https://jvn.jp/en/jp/JVN00442488/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "vultures@jpcert.or.jp",
      "vulnStatus": "Awaiting Analysis",
      "weaknesses": "[{\"source\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-798\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-36480\",\"sourceIdentifier\":\"vultures@jpcert.or.jp\",\"published\":\"2024-06-19T07:15:46.340\",\"lastModified\":\"2024-11-21T09:22:15.850\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC.\"},{\"lang\":\"es\",\"value\":\"Existe un problema de uso de credenciales codificadas en Ricoh Streamline NX PC Client versi\u00f3n 3.7.2 y versiones anteriores. Si se explota esta vulnerabilidad, un atacante puede obtener la cuenta LocalSystem de la PC donde est\u00e1 instalado el producto. Como resultado, es posible que se realicen operaciones no deseadas en la PC.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-798\"}]}],\"references\":[{\"url\":\"https://jvn.jp/en/jp/JVN00442488/\",\"source\":\"vultures@jpcert.or.jp\"},{\"url\":\"https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005\",\"source\":\"vultures@jpcert.or.jp\"},{\"url\":\"https://jvn.jp/en/jp/JVN00442488/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-36480\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-07-23T19:05:15.770286Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:ricoh:streamline_nx_pc_client:*:*:*:*:*:*:*:*\"], \"vendor\": \"ricoh\", \"product\": \"streamline_nx_pc_client\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"3.7.2\"}], \"defaultStatus\": \"unknown\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-798\", \"description\": \"CWE-798 Use of Hard-coded Credentials\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-07-19T19:38:16.861Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"CVE-2024-36480\", \"product\": \"Ricoh Streamline NX PC Client\", \"versions\": [{\"status\": \"affected\", \"version\": \"ver.3.7.2 and earlier\"}]}], \"references\": [{\"url\": \"https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005\"}, {\"url\": \"https://jvn.jp/en/jp/JVN00442488/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"Use of Hard-coded Credentials\"}]}], \"providerMetadata\": {\"orgId\": \"ede6fdc4-6654-4307-a26d-3331c018e2ce\", \"shortName\": \"jpcert\", \"dateUpdated\": \"2024-06-19T06:40:46.619Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-36480\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2024-07-23T19:05:23.166Z\", \"dateReserved\": \"2024-06-04T09:09:47.217Z\", \"assignerOrgId\": \"ede6fdc4-6654-4307-a26d-3331c018e2ce\", \"datePublished\": \"2024-06-19T06:40:46.619Z\", \"assignerShortName\": \"jpcert\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

JVNDB-2024-000061

Vulnerability from jvndb - Published: 2024-06-18 14:56 - Updated:2024-06-18 14:56

Severity ?

6.3 (Medium) - cvssV3_0 - CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Summary

Multiple vulnerabilities in Ricoh Streamline NX PC Client

Details

Ricoh Streamline NX PC Client provided by RICOH COMPANY, LTD. contains multiple vulnerabilities listed below. * [ricoh-2024-000004] Improper restriction of communication channel to intended endpoints (CWE-923) - CVE-2024-36252 * [ricoh-2024-000005] Use of hard-coded credentials (CWE-798) - CVE-2024-36480 * [ricoh-2024-000006] Use of potentially dangerous function (CWE-676) - CVE-2024-37124 * [ricoh-2024-000007] Use of potentially dangerous function (CWE-676) - CVE-2024-37387 CVE-2024-36252 Cai, Qi Qi of Siemens China Cybersecurity Testing Center - Shadowless Lab reported this vulnerability to RICOH COMPANY, LTD. and coordinated. After the coordination was completed, RICOH COMPANY, LTD. reported the case to IPA to notify users of the solution through JVN. CVE-2024-36480, CVE-2024-37124, CVE-2024-37387 Abian Blome of Siemens Energy reported these vulnerabilities to RICOH COMPANY, LTD. and coordinated. After the coordination was completed, RICOH COMPANY, LTD. reported the case to IPA to notify users of the solution through JVN.

References

Type

URL

	JVN	https://jvn.jp/en/jp/JVN00442488/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-36252
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-36480
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-37124
	CVE	https://www.cve.org/CVERecord?id=CVE-2024-37387
	No Mapping(CWE-Other)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

Ricoh Co., Ltd

RICOH Streamline NX PC Client

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000061.html",
  "dc:date": "2024-06-18T14:56+09:00",
  "dcterms:issued": "2024-06-18T14:56+09:00",
  "dcterms:modified": "2024-06-18T14:56+09:00",
  "description": "Ricoh Streamline NX PC Client provided by RICOH COMPANY, LTD. contains multiple vulnerabilities listed below.\r\n\r\n* [ricoh-2024-000004] Improper restriction of communication channel to intended endpoints (CWE-923) - CVE-2024-36252\r\n* [ricoh-2024-000005] Use of hard-coded credentials (CWE-798) - CVE-2024-36480\r\n* [ricoh-2024-000006] Use of potentially dangerous function (CWE-676) - CVE-2024-37124\r\n* [ricoh-2024-000007] Use of potentially dangerous function (CWE-676) - CVE-2024-37387\r\n\r\nCVE-2024-36252\r\nCai, Qi Qi of Siemens China Cybersecurity Testing Center - Shadowless Lab reported this vulnerability to RICOH COMPANY, LTD. and coordinated. After the coordination was completed, RICOH COMPANY, LTD. reported the case to IPA to notify users of the solution through JVN.\r\n\r\nCVE-2024-36480, CVE-2024-37124, CVE-2024-37387\r\nAbian Blome of Siemens Energy reported these vulnerabilities to RICOH COMPANY, LTD. and coordinated. After the coordination was completed, RICOH COMPANY, LTD. reported the case to IPA to notify users of the solution through JVN.",
  "link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000061.html",
  "sec:cpe": {
    "#text": "cpe:/a:ricoh:streamline_nx_pc_client",
    "@product": "RICOH Streamline NX PC Client",
    "@vendor": "Ricoh Co., Ltd",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "6.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2024-000061",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN00442488/index.html",
      "@id": "JVN#00442488",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-36252",
      "@id": "CVE-2024-36252",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-36480",
      "@id": "CVE-2024-36480",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-37124",
      "@id": "CVE-2024-37124",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-37387",
      "@id": "CVE-2024-37387",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Multiple vulnerabilities in Ricoh Streamline NX PC Client"
}

FKIE_CVE-2024-36480

Vulnerability from fkie_nvd - Published: 2024-06-19 07:15 - Updated: 2024-11-21 09:22

Severity ?

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	vultures@jpcert.or.jp	https://jvn.jp/en/jp/JVN00442488/
	vultures@jpcert.or.jp	https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005
	af854a3a-2127-422b-91ae-364da2661108	https://jvn.jp/en/jp/JVN00442488/
	af854a3a-2127-422b-91ae-364da2661108	https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC."
    },
    {
      "lang": "es",
      "value": "Existe un problema de uso de credenciales codificadas en Ricoh Streamline NX PC Client versi\u00f3n 3.7.2 y versiones anteriores. Si se explota esta vulnerabilidad, un atacante puede obtener la cuenta LocalSystem de la PC donde est\u00e1 instalado el producto. Como resultado, es posible que se realicen operaciones no deseadas en la PC."
    }
  ],
  "id": "CVE-2024-36480",
  "lastModified": "2024-11-21T09:22:15.850",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "published": "2024-06-19T07:15:46.340",
  "references": [
    {
      "source": "vultures@jpcert.or.jp",
      "url": "https://jvn.jp/en/jp/JVN00442488/"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://jvn.jp/en/jp/JVN00442488/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-798"
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary"
    }
  ]
}

GHSA-F96P-2MG2-2P89

Vulnerability from github – Published: 2024-06-19 09:31 – Updated: 2024-08-01 15:31

Details

Severity ?

9.8 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-36480"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-798"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-06-19T07:15:46Z",
    "severity": "CRITICAL"
  },
  "details": "Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC.",
  "id": "GHSA-f96p-2mg2-2p89",
  "modified": "2024-08-01T15:31:49Z",
  "published": "2024-06-19T09:31:16Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36480"
    },
    {
      "type": "WEB",
      "url": "https://jvn.jp/en/jp/JVN00442488"
    },
    {
      "type": "WEB",
      "url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000005"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2024-36480 (GCVE-0-2024-36480)

JVNDB-2024-000061

FKIE_CVE-2024-36480

GHSA-F96P-2MG2-2P89

Tags

Sightings

Nomenclature