CVE-2025-46783

CRITICAL

RICOH Streamline NX V3 PC Client <3.242.0 - Path Traversal

Title source: llm
STIX 2.1

Description

Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is running by tampering with specific files used on the product.

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0078
EPSS Percentile 51.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-22
Status published
Products (1)
Ricoh Company, Ltd./RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0
Published Jun 13, 2025
Tracked Since Feb 18, 2026