Description (CNA)
Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PFU Limited / Image Scanner Driver for Linux (fi Series) | affected 2.0.0; affected 2.1.0 through 2.1.1; affected 2.3.2; affected 2.5.0; affected 2.7.0 through 2.7.1; affected 2.8.0 through 2.8.2 |
| PFU Limited / Image Scanner Driver for Linux (SP Series) | affected 2.0.0; affected 2.1.0 through 2.1.1-4; affected 2.2.0 through 2.2.2; affected 2.3.0 |
CWE
CWE-78
References
- https://www.pfu.ricoh.com/global/products_security/vul2026000001e.html
- https://jvn.jp/en/vu/JVNVU96968110/
ADP enrichment
No English description supplied.
No references supplied.