CVEvulnerability
CVE-2025-57797
8.5 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2025-08-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 8.5 HIGH — CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-266
Description
Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command.
Related
Weakness · CWE (1)
- CWE-266 Incorrect Privilege Assignment weakness
References
- https://jvn.jp/en/jp/JVN69684540/ jvn.jp
- https://www.pfu.ricoh.com/imaging/news/news20230606.html www.pfu.ricoh.com
- https://www.pfu.ricoh.com/scansnap/software/sshome/requirement.html www.pfu.ricoh.com