High severity · published Aug 27, 2025
CVE-2025-57797
Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SM
ScanSnap Manager installers · PFU Limited
prior to V6.5L61 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-57797
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-57797
jvn.jp
https://jvn.jp/en/jp/JVN69684540/
www.pfu.ricoh.com
https://www.pfu.ricoh.com/imaging/news/news20230606.html
www.pfu.ricoh.com
https://www.pfu.ricoh.com/scansnap/software/sshome/requirement.html