CVE-2025-48825

RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who can conduct a man-in-the-middle attack to eavesdrop upgrade requests and execute a malicious DLL with custom code.

RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who can conduct a man-in-the-middle attack to eavesdrop upgrade requests and execute a malicious DLL with custom code.

Las versiones 3.5.0 a 3.7.0 de RICOH Streamline NX V3 PC Client contienen un problema con el uso de una fuente menos confiable, lo que puede permitir que un atacante que pueda realizar un ataque intermediario espíe solicitudes de actualización y ejecute una DLL maliciosa con código personalizado.