CVE-2025-58422CWE-348

CVE-2025-58422

Low · published September 8, 2025

CVSS v3.0
3.1
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

RICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history. If an attacker can perform a man-in-the-middle attack, they may alter the values of HTTP requests, which could result in tampering with the operation history of the product’s management tool.

The record
Technical detail
CVSS v3.0
3.1 · LOW
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00115 · 1.5th percentile
Weakness
CWE-348 · Use of Less Trusted Source
Published
2025-09-08T09:15Z
References (2)
https://jvn.jp/en/jp/JVN75307484/ · [email protected]https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000010 · [email protected]
EPSS history
Timeline
  • 08 SEP 04:43Z
    RICOH Streamline NX versions 3.5.1 to 24R3 are vulnerable to tampering with operation history
    cvelistv5