Skip to main content

Ricoh Streamline NX PC Client CVE-2024-36252

MEDIUM
Improper Restriction of Communication Channel to Intended Endpoints (CWE-923)
2024-06-19 vultures@jpcert.or.jp
RCE
6.3
CVSS 3.1 · Vendor: jpcert
Share

Severity by source

Vendor (jpcert) PRIMARY
6.3 MEDIUM
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Primary rating from Vendor (jpcert) · only source for this CVE.

CVSS VectorVendor: jpcert

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Lifecycle Timeline

1
CVE Published
Jun 19, 2024 - 07:15 cve.org
MEDIUM 6.3

DescriptionCVE.org

Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed.

AnalysisAI

Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. Rated medium severity (CVSS 6.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-923. Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed.

Affected ProductsAI

Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

Same weakness CWE-923 – Improper Restriction of Communication Channel to Intended Endpoints

View all
CVE-2026-34205 CRITICAL POC
9.6
CVE-2024-41889 CRITICAL
9.8
CVE-2019-17440 CRITICAL
9.8
CVE-2017-3891 CRITICAL
9.6
CVE-2022-2663 MEDIUM POC
5.3
CVE-2025-20261 HIGH
8.8
CVE-2025-61939 HIGH
8.8
CVE-2026-59841 HIGH
7.5

Same technique RCE

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2016-4117 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2025-53770 CRITICAL POC
9.8
CVE-2020-7961 CRITICAL POC
9.8

Share

CVE-2024-36252 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy