TI-2025-05492 Aliases CVE-2025-6081 GHSA-42rp-jq4q-vj3x

Pass-back attack in Konica Minolta bizhub 227 multifunctional printers

LOW 30CWE-522Published 2025-07-01 · Updated 2025-07-02

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-522.

Summary

Insufficiently Protected Credentials in LDAP in Konica Minolta bizhub 227 Multifunction printers version GCQ-Y3 or earlier allows an attacker can reconfigure the target device to use an external LDAP service controlled by the attacker. If an LDAP password is set on the target device, the attacker can force the target device to authenticate to the attacker controlled LDAP service. This will allow the attacker to capture the plaintext password of the configured LDAP service.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00316 24th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Konica Minolta, Inc.	bizhub 227 Multifunction printers	GCQ-Y3	—	No fix listed	CNA

bizhub 227 Multifunction printers VendorKonica Minolta, Inc. Affected GCQ-Y3 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-6081
2026-10-03 Alias added: GHSA-42rp-jq4q-vj3x

References

Advisory 1

https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0003.pdf

Other 1

https://www.rapid7.com/blog/post/cve-2025-6081-konica-minolta-bizhub-pass-back-attack-vulnerability-not-fixed/

TI-2024-34868 Authentication bypass via default password generation affecting multiple models from… CVSS 3.1CRITICAL 9.8
TI-2020-19204 Konica Minolta FTP Utility 1.0 - 'NLST' Denial of Service CVSS 4.0HIGH 8.7
TI-2020-19203 Konica Minolta FTP Utility 1.0 - 'LIST' Denial of Service CVSS 4.0HIGH 8.7
TI-2024-34873 Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple… CVSS 3.1HIGH 7.5
TI-2015-06313 Directory traversal vulnerability in Konica Minolta FTP Utility 1.0 allows remote… CVSS 2.0HIGH 7.8
TI-2015-06448 Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute… CVSS 2.0HIGH 7.5

See all 27 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences