CVE-2024-37124

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, an attacker may create an arbitrary file in the PC where the product is installed.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

VendorProductVersions
RICOH COMPANY, LTD.Ricoh Streamline NX PC Clientver.3.2.1.19; ver.3.3.1.3; ver.3.3.2.201; ver.3.4.3.1; ver.3.5.1.201 (ver.3.5.1.200op1); ver.3.6.100.53; and ver.3.6.2.1
ricohstreamline_nx_pc_clientver.3.2.1.19
ricohstreamline_nx_pc_clientver.3.3.1.3
ricohstreamline_nx_pc_clientver.3.3.2.201
ricohstreamline_nx_pc_clientver.3.4.3.1
ricohstreamline_nx_pc_clientver.3.5.1.201\/ver.3.5.1.200op1\/
ricohstreamline_nx_pc_clientver.3.6.100.53
ricohstreamline_nx_pc_clientver.3.6.2.1

References

Timeline

Published
Jun 19, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-371257.5Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x,10.5.3.x, contains an Uncontrolled Resource Consumption vulnerability.CVE-2024-371266.7Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacCVE-2024-371277.8Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially eCVE-2024-371297.8Dell Inventory Collector, versions prior to 12.3.0.6 contains a Path Traversal vulnerability. A local authenticated malicious user could potCVE-2024-371307.8Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking. A CVE-2024-371319.8SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A remote unauthenticated CVE-2024-371326.7Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an incorrect privilege assignment vulnerability. A high privileged attacker wCVE-2024-371336.7Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacCVE-2024-371346.7Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacCVE-2024-371354.4DM5500 5.16.0.0, contains an information disclosure vulnerability. A local attacker with high privileges could potentially exploit this vulnCVE-2024-371364.9Dell Path to PowerProtect, versions 1.1, 1.2, contains an Exposure of Private Personal Information to an Unauthorized Actor vulnerability. ACVE-2024-371375.5Dell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky Implementation vulnerability. A local priv
CVE-2024-37124: Critical severity, CVSS 9.8 | Vulnix