{"id":"CVE-2024-36252","aliases":["EUVD-2024-36000","GHSA-2768-785q-97pf"],"status":"published","title":"Improper restriction of communication channel to intended endpoints issue exists in Ricoh...","description":"Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00225,"percentile":0.13216,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-923"],"published":"2024-06-19T06:40:38Z","modified":"2026-06-17T07:36:22Z","products":[{"vendor":"ricoh company, ltd","product":"ricoh streamline nx pc client"},{"vendor":"ricoh company, ltd.","product":"ricoh streamline nx pc client"}],"references":[{"url":"https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2024-000004","tags":["x_transferred"]},{"url":"https://jvn.jp/en/jp/JVN00442488/","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36252"},{"url":"https://jvn.jp/en/jp/JVN00442488"},{"url":"https://github.com/advisories/GHSA-2768-785q-97pf"}],"sources":{"cve":[{"id":"CVE-2024-36252","description":"Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed.","status":"published","published":"2024-06-19T06:40:38.87Z","modified":"2024-08-02T03:37:03.68Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-923"],"updated_at":"2026-11-02T14:34:14.985673Z"}],"euvd":[{"id":"EUVD-2024-36000","description":"Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed.","status":"published","published":"2024-06-19T06:40:38Z","modified":"2024-08-02T03:37:03Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T03:50:20.360548Z"}],"ghsa":[{"id":"GHSA-2768-785q-97pf","title":"Improper restriction of communication channel to intended endpoints issue exists in Ricoh...","description":"Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed.","status":"published","published":"2024-06-19T09:31:16Z","modified":"2024-07-03T18:45:52Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-923"],"updated_at":"2026-11-02T14:57:37.660934Z"}],"nvd":[{"id":"CVE-2024-36252","description":"Improper restriction of communication channel to intended endpoints issue exists in Ricoh Streamline NX PC Client ver.3.6.x and earlier. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is installed.","status":"published","published":"2024-06-19T07:15:46.2Z","modified":"2026-06-17T07:36:22.63Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-923"],"updated_at":"2026-11-02T14:10:07.173605Z"}]}}