CVE-2022-36403

Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Score

CVSS 3.1 7.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2022-09-08

Last modified

2024-08-03

Weaknesses

CWE-426

Affected products

• Device Software Manager (Ricoh)
• Installer Of Device Software Manager (Ricoh Company Ltd.)

References

• https://jvn.jp/en/jp/JVN44721267/index.html
• https://www.ricoh.com/software/dev_soft_manager