CVE-2025-48825CWE-348
RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who can conduct a…
Low · published June 13, 2025
What it is
RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who can conduct a man-in-the-middle attack to eavesdrop upgrade requests and execute a malicious DLL with custom code.
The record
Technical detail
- CVSS v4.0
- 2.0 · LOW
- Vector
- CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00120 · 1.7th percentile
- Weakness
- CWE-348 · Use of Less Trusted Source
- Published
- 2025-06-13T08:19Z
EPSS history
Timeline