External Control of File Name Vulnerability in RICOH Streamline NX V3
CVE-2025-36506

6.9MEDIUM

Key Information:

Vendor

Ricoh Company, Ltd.

Status
Ricoh Streamline Nx V3 Pc Client
Vendor
CVE Published:
13 June 2025

What is CVE-2025-36506?

An external control of file name or path vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. When exploited, this vulnerability allows attackers to send specially crafted requests that can overwrite arbitrary files within the file system with unauthorized log data, potentially compromising system integrity and leading to data loss.

Affected Version(s)

RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0

References

https://www.ricoh.com/products/security/vulnerabilities/v...
https://jvn.jp/en/jp/JVN27937557/

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.