CVE-2025-57797

high

Description

Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command.

References

https://www.pfu.ricoh.com/scansnap/software/sshome/requirement.html

https://www.pfu.ricoh.com/imaging/news/news20230606.html

https://jvn.jp/en/jp/JVN69684540/

Details

Source: Mitre, NVD

Published: 2025-08-27

Updated: 2025-08-27

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

CVSS v4

Base Score: 8.5

Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N