CVE-2024-36480: Critical severity ricoh streamline nx client tool vulnerability
Use of hard-coded credentials issue exists in Ricoh Streamline NX PC Client ver.3.7.2 and earlier. If this vulnerability is exploited, an attacker may obtain LocalSystem Account of the PC where the product is installed. As a result, unintended operations may be performed on the PC.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36480?
CVE-2024-36480 is considered a high severity vulnerability due to the potential for an attacker to gain LocalSystem Account access.
How do I fix CVE-2024-36480?
To mitigate CVE-2024-36480, upgrade to Ricoh Streamline NX PC Client version 3.7.3 or later where the hard-coded credentials issue is resolved.
What software is affected by CVE-2024-36480?
CVE-2024-36480 affects Ricoh Streamline NX PC Client version 3.7.2 and earlier.
What are the risks associated with CVE-2024-36480?
Exploitation of CVE-2024-36480 could allow an attacker to perform unintended operations on the compromised PC.
Is there a workaround for CVE-2024-36480?
No specific workaround is recommended for CVE-2024-36480; the best course is to update to the patched version.