CVE-2025-48825 Supply chain in RICOH Streamline NX V3 PC Client
An attacker can execute malicious code by intercepting upgrade requests via a man-in-the-middle attack due to untrusted source usage.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-48825?
CVE-2025-48825 is a low-severity vulnerability in RICOH Streamline NX V3 PC Client, published on 13 Jun 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who can conduct a man-in-the-middle attack to eavesdrop upgrade requests and execute a malicious DLL with custom code.
Weakness: CWE-348
Which versions are affected by CVE-2025-48825?
How do I fix CVE-2025-48825?
No fix has been published for CVE-2025-48825 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-48825 being exploited?
There is no known exploitation of CVE-2025-48825 in the wild and no public exploit code.
Sources
Also known as GHSA-pgq3-h7j5-w9fw.