Konica Minolta, Inc.

Records28All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high10CVSS 7.0–8.9

Exploited now

Konica Minolta, Inc. records in CISA KEV

No Konica Minolta, Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bizhub 227 Firmware 8 records LOW Bizhub 287 Firmware 8 records LOW Bizhub 308 Firmware 8 records LOW Bizhub 308e Firmware 8 records LOW Bizhub 368 Firmware 8 records LOW Bizhub 368e Firmware 8 records LOW Bizhub 4052 Firmware 8 records LOW Bizhub 458 Firmware 8 records LOW

Records

8 records in Bizhub 4052 Firmware · all components

TI-2022-12025 CVE-2022-29588 · GHSA-g6vp-23xc-rxrv

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for…

LOW 36

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01752 Published 2022-05-16 No fix listed CWE-522

TI-2022-12023 CVE-2022-29586 · GHSA-6pfp-7jf5-ghjw

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape.

LOW 33

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape.

CVSS 3.1HIGH 7.4 Physical Low privileges No interaction EPSS 0.00447 Published 2022-05-16 No fix listed

TI-2021-04086 CVE-2021-20872 · GHSA-8vf2-m489-q377

Protection mechanism failure vulnerability in KONICA MINOLTA bizhub series (bizhub C750i…

LOW 30

Protection mechanism failure vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier, bizhub 750i/650i/550i…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.0031 Published 2022-01-04 No fix listed

TI-2021-04085 CVE-2021-20871 · GHSA-9pff-r35c-jg48

Information disclosure in Konica Minolta, Inc. bizhub series

LOW 30

Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00537 Published 2022-01-04 No fix listed CWE-200

TI-2021-04083 CVE-2021-20869 · GHSA-gw8f-9669-8rc2

Information disclosure in Konica Minolta, Inc. bizhub series

LOW 30

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.0055 Published 2022-01-04 No fix listed CWE-200

TI-2021-04084 CVE-2021-20870 · GHSA-6c2h-x2jr-x8w2

Improper handling of exceptional conditions in Konica Minolta, Inc. bizhub series

LOW 21

Improper handling of exceptional conditions vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier, bizhub…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00308 Published 2022-01-04 No fix listed CWE-755

TI-2021-04082 CVE-2021-20868 · GHSA-5grr-wg7c-8c88

Incorrect authorization in Konica Minolta, Inc. bizhub series

LOW 21

Incorrect authorization vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier, bizhub 750i/650i/550i/450i…

CVSS 3.1MEDIUM 4.5 Adjacent network High privileges No interaction EPSS 0.0045 Published 2022-01-04 No fix listed CWE-863

TI-2022-12024 CVE-2022-29587 · GHSA-3mqc-6cqg-j6mm

Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser…

LOW 19

Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges.

CVSS 3.1MEDIUM 4.0 Physical Low privileges No interaction EPSS 0.00399 Published 2022-05-16 No fix listed CWE-269

Open these records in search →