CVE-2023-30759

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-30759
The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modification and may spawn an unexpected process with the administrative privilege. If a non-administrative user modifies the driver installation package and runs it on the target PC, an arbitrary program may be executed with the administrative privilege.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://jvn.jp/en/vu/JVNVU92207133/ Third Party Advisory
https://www.ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000048-2023-000001 Vendor Advisory
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2023-000001 Vendor Advisory
https://jvn.jp/en/vu/JVNVU92207133/ Third Party Advisory
https://www.ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000048-2023-000001 Vendor Advisory
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2023-000001 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ricoh:printer_driver_packager_nx:*:*:*:*:*:*:*:*
History

12 Dec 2024, 21:15

Type Values Removed Values Added
CWE CWE-352

21 Nov 2024, 08:00

Type Values Removed Values Added
References () https://jvn.jp/en/vu/JVNVU92207133/ - Third Party Advisory () https://jvn.jp/en/vu/JVNVU92207133/ - Third Party Advisory
References () https://www.ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000048-2023-000001 - Vendor Advisory () https://www.ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000048-2023-000001 - Vendor Advisory
References () https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2023-000001 - Vendor Advisory () https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2023-000001 - Vendor Advisory

27 Jun 2023, 18:36

Type Values Removed Values Added
First Time Ricoh printer Driver Packager Nx
Ricoh
CPE cpe:2.3:a:ricoh:printer_driver_packager_nx:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-345
References (MISC) https://www.ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000048-2023-000001 - (MISC) https://www.ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000048-2023-000001 - Vendor Advisory
References (MISC) https://jvn.jp/en/vu/JVNVU92207133/ - (MISC) https://jvn.jp/en/vu/JVNVU92207133/ - Third Party Advisory
References (MISC) https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2023-000001 - (MISC) https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2023-000001 - Vendor Advisory

19 Jun 2023, 05:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-06-19 05:15

Updated : 2024-12-12 21:15

NVD link : CVE-2023-30759

Mitre link : CVE-2023-30759

CVE.ORG link : CVE-2023-30759

JSON object : View

Products Affected

ricoh

  • printer_driver_packager_nx
CWE
CWE-345

Insufficient Verification of Data Authenticity

CWE-352

Cross-Site Request Forgery (CSRF)