VulnerabilityDeferred

CVE-2025-36506

If an attacker sends a specially crafted request, arbitrary files in the file system can be overwritten with log data.

MEDIUM 6.9EPSS 0.39%

Does this matter?

Lower severity and a low EPSS score (0.39%). Track it; it rarely justifies an emergency change on its own.

Description

External control of file name or path issue exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If an attacker sends a specially crafted request, arbitrary files in the file system can be overwritten with log data.

CVSS 4.0: 6.9 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.39% probability · 33th percentile
CISA KEV: Not listed
Weakness: CWE-73
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN27937557/
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000004

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.