Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape.
Priority LOW 33Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode.
Why it matters now
EPSS 0.00447 39th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 90
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:konicaminolta:bizhub_226i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_226i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_227_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_227:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_246i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_246i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_287_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_287:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_306i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_306i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
- cpe:2.3:o:konicaminolta:bizhub_226i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_226i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_227_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_227:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_246i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_246i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_287_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_287:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_306i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_306i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
Show 80 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:konicaminolta:bizhub_308_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_308:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_308e_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_308e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_367_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_367:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_368_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_368:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_368e_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_368e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_4052_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_4052:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_458_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_458:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_458e_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_458e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_4752_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_4752:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_558_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_558:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_558e_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_558e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_658e_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_658e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_758_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_758:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_808_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_808:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_958_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_958:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c227_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c227:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c250i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c250i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c258_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c258:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c287_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c287:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c300i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c300i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c308_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c308:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3300i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3300i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3320i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3320i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3350i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3350i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3351_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3351:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c360i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c360i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c368_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c368:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3851_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3851:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3851fs_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3851fs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c4000i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c4000i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c4050i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c4050i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c450i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c450i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c458_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c458:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c550i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c550i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c558_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c558:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c650i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c650i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c658_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c658:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c659_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c659:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c759_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c759:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_pro958_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_pro958:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
- cpe:2.3:o:konicaminolta:bizhub_308_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_308:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_308e_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_308e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_367_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_367:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_368_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_368:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_368e_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_368e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_4052_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_4052:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_458_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_458:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_458e_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_458e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_4752_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_4752:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_558_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_558:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_558e_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_558e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_658e_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_658e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_758_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_758:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_808_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_808:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_958_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_958:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c227_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c227:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c250i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c250i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c258_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c258:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c287_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c287:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c300i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c300i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c308_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c308:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3300i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3300i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3320i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3320i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3350i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3350i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3351_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3351:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c360i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c360i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c368_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c368:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3851_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3851:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3851fs_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3851fs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c4000i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c4000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c4050i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c4050i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c450i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c450i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c458_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c458:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c550i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c550i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c558_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c558:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c650i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c650i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c658_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c658:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c659_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c659:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c759_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c759:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_pro958_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_pro958:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-29586
- 2026-10-03 Alias added: GHSA-6pfp-7jf5-ghjw
References
More Konica Minolta, Inc. Bizhub 226i Firmware vulnerabilities
- TI-2022-12025 Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for… CVSS 3.1HIGH 7.5
- TI-2021-04085 Information disclosure in Konica Minolta, Inc. bizhub series CVSS 3.1MEDIUM 6.5
- TI-2021-04083 Information disclosure in Konica Minolta, Inc. bizhub series CVSS 3.1MEDIUM 6.5
- TI-2021-04084 Improper handling of exceptional conditions in Konica Minolta, Inc. bizhub series CVSS 3.1MEDIUM 4.6
- TI-2021-04082 Incorrect authorization in Konica Minolta, Inc. bizhub series CVSS 3.1MEDIUM 4.5
- TI-2022-12024 Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser… CVSS 3.1MEDIUM 4.0
Sources
- CVE-2022-29586 · CVE Program
- CVE-2022-29586 · NVD
- FIRST EPSS
- GHSA-6pfp-7jf5-ghjw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences