VulnerabilityDeferred

CVE-2024-37387

If this vulnerability is exploited, files in the PC where the product is installed may be altered.

MEDIUM 4.0EPSS 0.16%

Does this matter?

Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.

Description

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, files in the PC where the product is installed may be altered.

CVSS 3.1: 4.0 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS: 0.16% probability · 6th percentile
CISA KEV: Not listed
Weakness: CWE-676
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN00442488/
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000007
https://jvn.jp/en/jp/JVN00442488/
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000007

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.