Description (CNA)
Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PFU Limited / Image Scanner Driver for Linux (fi Series) | affected 2.0.0; affected 2.1.0 through 2.1.1; affected 2.3.2; affected 2.5.0; affected 2.7.0 through 2.7.1; affected 2.8.0 through 2.8.2 |
| PFU Limited / Image Scanner Driver for Linux (SP Series) | affected 2.0.0; affected 2.1.0 through 2.1.1-4; affected 2.2.0 through 2.2.2; affected 2.3.0 |
CWE
CWE-59
References
- https://www.pfu.ricoh.com/global/products_security/vul2026000001e.html
- https://jvn.jp/en/vu/JVNVU96968110/
ADP enrichment
No English description supplied.
No references supplied.