CVE-2024-37387

{"id": "CVE-2024-37387", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.5}]}, "published": "2024-06-19T07:15:46.647", "references": [{"url": "https://jvn.jp/en/jp/JVN00442488/", "source": "vultures@jpcert.or.jp"}, {"url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000007", "source": "vultures@jpcert.or.jp"}, {"url": "https://jvn.jp/en/jp/JVN00442488/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000007", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-676"}]}], "descriptions": [{"lang": "en", "value": "Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, files in the PC where the product is installed may be altered."}, {"lang": "es", "value": "Existe un problema de uso de funciones potencialmente peligrosas en Ricoh Streamline NX PC Client. Si se aprovecha esta vulnerabilidad, es posible que se modifiquen los archivos del PC donde est\u00e1 instalado el producto."}], "lastModified": "2024-11-21T09:23:45.683", "sourceIdentifier": "vultures@jpcert.or.jp"}