CVE-2025-57797

8.5 highEPSS 0.1%

High (8.5). EPSS 0.1% chance of exploitation in the next 30 days.

Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command.

Severity

CVSS 4.0

8.5 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-266
Published: 2025-08-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://jvn.jp/en/jp/JVN69684540/
https://www.pfu.ricoh.com/imaging/news/news20230606.html
https://www.pfu.ricoh.com/scansnap/software/sshome/requirement.html

Check your stack JSON