CVE-2022-36403: Ricoh Device Software Manager

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in the installer of Device Software Manager prior to Ver.2.20.3.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

Affected products

• Ricoh Device Software Manager: before 2.20.3.0 (fixed in 2.20.3.0)

Published 2022-09-08. Last modified 2026-06-17.