CVE-2025-48825

2.0 lowEPSS 0.1%

Low (2.0). EPSS 0.1% chance of exploitation in the next 30 days.

RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who can conduct a man-in-the-middle attack to eavesdrop upgrade requests and execute a malicious DLL with custom code.

Severity

CVSS 4.0

2.0 low

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS 3.0

2.5 low

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-348
Published: 2025-06-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://jvn.jp/en/jp/JVN27937557/
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000006

Check your stack JSON