CVE-2025-36506: Medium severity Ricoh Streamline NX V3 PC Client vulnerability
Published Jun 13, 2025
·Updated
External control of file name or path issue exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If an attacker sends a specially crafted request, arbitrary files in the file system can be overwritten with log data.
Affected Software
1 affected component
Ricoh Streamline NX V3 PC Client>=3.5.0<=3.242.0
Event History
Jun 13, 2025
CVE Published
via MITRE·08:18 AM
Data Sourced
via MITRE·08:18 AM
DescriptionSeverity
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-36506?
CVE-2025-36506 is considered a high-severity vulnerability due to its potential to overwrite arbitrary files on the system.
2
How do I fix CVE-2025-36506?
To fix CVE-2025-36506, update RICOH Streamline NX V3 PC Client to version above 3.242.0.
3
What types of systems are affected by CVE-2025-36506?
CVE-2025-36506 affects RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0.
4
What are the potential impacts of CVE-2025-36506?
The potential impacts of CVE-2025-36506 include unauthorized file overwrites and data loss.
5
Who is affected by CVE-2025-36506?
Organizations using vulnerable versions of RICOH Streamline NX V3 PC Client are at risk from CVE-2025-36506.