Skip to content
OpenAdvisories
Low · 2.5 CVE-2025-48825 EUVD-2025-18256GHSA-pgq3-h7j5-w9fw

RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who…

Published Jun 13, 2025 · Updated Jun 23, 2025 · Assigned by jpcert

Description

RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who can conduct a man-in-the-middle attack to eavesdrop upgrade requests and execute a malicious DLL with custom code.

Affected products

VendorProductAffectedFixed
Ricoh Company RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 —

References