CVE-2025-36506

Publication date

2025-06-13 08:18:49

Family

jpcert

State

PUBLISHED

Description

External control of file name or path issue exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If an attacker sends a specially crafted request, arbitrary files in the file system can be overwritten with log data.