Filtered by vendor Ricoh Subscriptions
Total 44 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-37406 1 Ricoh 2 Aficio Sp 4210n, Aficio Sp 4210n Firmware 2024-08-03 4.8 Medium
Cross-site scripting vulnerability in Aficio SP 4210N firmware versions prior to Web Support 1.05 allows a remote authenticated attacker with an administrative privilege to inject an arbitrary script.
CVE-2022-36403 1 Ricoh 1 Device Software Manager 2024-08-03 7.8 High
Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2023-30759 1 Ricoh 1 Printer Driver Packager Nx 2024-08-02 7.8 High
The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modification and may spawn an unexpected process with the administrative privilege. If a non-administrative user modifies the driver installation package and runs it on the target PC, an arbitrary program may be executed with the administrative privilege.
CVE-2024-36480 1 Ricoh 1 Streamline Nx Pc Client 2024-08-02 9.8 Critical
Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC.