{"id":"CVE-2024-36252","state":"PUBLISHED","title":"Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitra","description":"Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed.","publishedAt":"2024-06-19T06:40:38.870Z","updatedAt":"2024-08-02T03:37:03.680Z","severity":{"score":6.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","source":"CISA-ADP"},"assigner":"jpcert","products":["RICOH COMPANY, LTD Ricoh Streamline NX PC Client"],"affected":[{"vendor":"RICOH COMPANY, LTD","product":"Ricoh Streamline NX PC Client","versions":[{"version":"ver.3.6.x and earlier","status":"affected"}]}],"references":["https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000004","https://jvn.jp/en/jp/JVN00442488/"],"weaknesses":["CWE-923"],"ingestedAt":"2026-10-29T20:07:30.303Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/36xxx/CVE-2024-36252.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-36252","state":"PUBLISHED","datePublished":"2024-06-19T06:40:38.870Z","dateUpdated":"2024-08-02T03:37:03.680Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2024-06-04T09:09:46.380Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed."}],"affected":[{"vendor":"RICOH COMPANY, LTD","product":"Ricoh Streamline NX PC Client","versions":[{"version":"ver.3.6.x and earlier","status":"affected"}]}],"references":[{"url":"https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000004"},{"url":"https://jvn.jp/en/jp/JVN00442488/"}],"problemTypes":[{"descriptions":[{"description":"Improper restriction of communication channel to intended endpoints","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"jpcert","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateUpdated":"2024-06-19T06:40:38.870Z"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.3,"attackVector":"ADJACENT_NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"NONE","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-06-25T15:21:10.721078Z","id":"CVE-2024-36252","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-923","type":"CWE","lang":"en","description":"CWE-923 Improper Restriction of Communication Channel to Intended Endpoints"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-25T15:21:18.874Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000004","tags":["x_transferred"]},{"url":"https://jvn.jp/en/jp/JVN00442488/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T03:37:03.680Z"}}]}}}