CVEvulnerability
CVE-2023-30759
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-06-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-345, CWE-352
Description
The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modification and may spawn an unexpected process with the administrative privilege. If a non-administrative user modifies the driver installation package and runs it on the target PC, an arbitrary program may be executed with the administrative privilege.
Affected configurations
• ricoh printer driver packager nx (>= 1.0.02 < 1.1.26)
Related
References
- https://jvn.jp/en/vu/JVNVU92207133/ Third Party Advisory
- https://www.ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000048-2023-000001 Vendor Advisory
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2023-000001 Vendor Advisory
- https://jvn.jp/en/vu/JVNVU92207133/ Third Party Advisory
- https://www.ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000048-2023-000001 Vendor Advisory
- https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2023-000001 Vendor Advisory