Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for…
Priority LOW 36CWE-522Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-522.
Summary
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.
Why it matters now
EPSS 0.01752 78th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 90
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:konicaminolta:bizhub_226i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_226i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_227_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_227:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_246i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_246i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_287_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_287:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_306i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_306i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
- cpe:2.3:o:konicaminolta:bizhub_226i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_226i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_227_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_227:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_246i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_246i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_287_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_287:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_306i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_306i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
Show 80 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:konicaminolta:bizhub_308_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_308:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_308e_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_308e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_367_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_367:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_368_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_368:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_368e_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_368e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_4052_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_4052:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_458_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_458:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_458e_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_458e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_4752_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_4752:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_558_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_558:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_558e_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_558e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_658e_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_658e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_758_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_758:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_808_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_808:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_958_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_958:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c227_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c227:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c250i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c250i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c258_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c258:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c287_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c287:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c300i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c300i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c308_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c308:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3300i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3300i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3320i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3320i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3350i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3350i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3351_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3351:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c360i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c360i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c368_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c368:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3851_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3851:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c3851fs_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c3851fs:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c4000i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c4000i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c4050i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c4050i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c450i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c450i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c458_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c458:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c550i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c550i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c558_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c558:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c650i_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c650i:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c658_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c658:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c659_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c659:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_c759_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_c759:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
| cpe:2.3:o:konicaminolta:bizhub_pro958_firmware:*:*:*:*:*:*:*:* | before 2022-04-14 | Vulnerable | Konica Minolta, Inc. |
| cpe:2.3:h:konicaminolta:bizhub_pro958:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Konica Minolta, Inc. |
- cpe:2.3:o:konicaminolta:bizhub_308_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_308:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_308e_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_308e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_367_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_367:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_368_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_368:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_368e_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_368e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_4052_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_4052:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_458_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_458:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_458e_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_458e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_4752_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_4752:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_558_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_558:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_558e_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_558e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_658e_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_658e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_758_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_758:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_808_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_808:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_958_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_958:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c227_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c227:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c250i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c250i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c258_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c258:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c287_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c287:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c300i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c300i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c308_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c308:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3300i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3300i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3320i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3320i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3350i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3350i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3351_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3351:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c360i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c360i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c368_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c368:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3851_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3851:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c3851fs_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c3851fs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c4000i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c4000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c4050i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c4050i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c450i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c450i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c458_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c458:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c550i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c550i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c558_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c558:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c650i_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c650i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c658_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c658:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c659_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c659:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_c759_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_c759:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
- cpe:2.3:o:konicaminolta:bizhub_pro958_firmware:*:*:*:*:*:*:*:* Versions before 2022-04-14 Vulnerable ·Konica Minolta, Inc.
- cpe:2.3:h:konicaminolta:bizhub_pro958:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Konica Minolta, Inc.
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-29588
- 2026-10-03 Alias added: GHSA-g6vp-23xc-rxrv
References
More Konica Minolta, Inc. Bizhub 226i Firmware vulnerabilities
- TI-2022-12023 Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. CVSS 3.1HIGH 7.4
- TI-2021-04085 Information disclosure in Konica Minolta, Inc. bizhub series CVSS 3.1MEDIUM 6.5
- TI-2021-04083 Information disclosure in Konica Minolta, Inc. bizhub series CVSS 3.1MEDIUM 6.5
- TI-2021-04084 Improper handling of exceptional conditions in Konica Minolta, Inc. bizhub series CVSS 3.1MEDIUM 4.6
- TI-2021-04082 Incorrect authorization in Konica Minolta, Inc. bizhub series CVSS 3.1MEDIUM 4.5
- TI-2022-12024 Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser… CVSS 3.1MEDIUM 4.0
Sources
- CVE-2022-29588 · CVE Program
- CVE-2022-29588 · NVD
- FIRST EPSS
- GHSA-g6vp-23xc-rxrv · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences