Unscored CVE-2022-36403 EUVD-2022-39116GHSA-93q5-jv83-4wg5

Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges…

Published Sep 8, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Ricoh Company Product: Installer of Device Software Manager

Description

Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

Vendor	Product	Affected	Fixed
RICOH COMPANY	Installer of Device Software Manager	prior to Ver.2.20.3.0	—

References

https://www.ricoh.com/software/dev_soft_manager
https://jvn.jp/en/jp/JVN44721267/index.html