What’s Vulnerable › Vulnerabilities

CVE-2023-30759

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-19 · updated 2026-06-17
• Weakness: CWE-345

Description

The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modification and may spawn an unexpected process with the administrative privilege. If a non-administrative user modifies the driver installation package and runs it on the target PC, an arbitrary program may be executed with the administrative privilege.

Affected products

• Ricoh Company, Ltd. Printer Driver Packager NX: from 1.0.02 before 1.1.26 — fixed in 1.1.26

How to fix

Upgrade to a fixed version: Ricoh Company, Ltd. Printer Driver Packager NX 1.1.26. Check the vendor advisory for mitigations.

References

• https://jvn.jp/en/vu/JVNVU92207133/
• https://www.ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000048-2023-000001
• https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2023-000001
• https://jvn.jp/en/vu/JVNVU92207133/
• https://www.ricoh.com/products/security/vulnerabilities/adv?id=ricoh-prod000048-2023-000001
• https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2023-000001

Get alerted when CVE-2023-30759 or the next vulnerability affects your stack