PT-2025-25400 · Ricoh · Ricoh Streamline Nx V3 Pc Client

Published 2025-06-13 · Updated 2025-06-13 · CVE-2025-36506

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0

Description An issue exists where an attacker can control file names or paths, allowing arbitrary files in the file system to be overwritten with log data if a specially crafted request is sent.

Recommendations For RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0, update to a version that fixes this issue to prevent arbitrary file overwrites.

Fix

Weakness Enumeration

CWE-73

Related Identifiers

BDU:2025-07290

CVE-2025-36506

Affected Products

Ricoh Streamline Nx V3 Pc Client

References · 10

• https://bdu.fstec.ru/vul/2025-07290 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-36506 · Security Note
• https://t.me/latest_high_impact_cve/2645 · Telegram Post
• https://t.me/latest_high_impact_cve/2644 · Telegram Post
• https://twitter.com/CVEnew/status/1933446361808060416 · Twitter Post
• https://t.me/cvetracker/26174 · Telegram Post
• https://ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000004 · Note
• https://t.me/cvenotify/125599 · Telegram Post
• https://ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000077-2025-000004 · Note
• https://jvn.jp/en/jp/JVN27937557 · Note