CVE Feed

    Dashboard / CVE / CVE-2022-29587

    CVE-2022-29587

    Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges.

    Published:May 16, 2022
    Last Modified:Nov 21, 2024
    EPS:May 16, 2022
    EPSS Score:0.00104
    CVSS Score:4

    Affected Products

    Vendor
    Konicaminolta
    Product
    Bizhub 226i
    Vendor
    Konicaminolta
    Product
    Bizhub 226i Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 227
    Vendor
    Konicaminolta
    Product
    Bizhub 227 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 246i
    Vendor
    Konicaminolta
    Product
    Bizhub 246i Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 287
    Vendor
    Konicaminolta
    Product
    Bizhub 287 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 306i
    Vendor
    Konicaminolta
    Product
    Bizhub 306i Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 308
    Vendor
    Konicaminolta
    Product
    Bizhub 308 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 308e
    Vendor
    Konicaminolta
    Product
    Bizhub 308e Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 367
    Vendor
    Konicaminolta
    Product
    Bizhub 367 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 368
    Vendor
    Konicaminolta
    Product
    Bizhub 368 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 368e
    Vendor
    Konicaminolta
    Product
    Bizhub 368e Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 4052
    Vendor
    Konicaminolta
    Product
    Bizhub 4052 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 458
    Vendor
    Konicaminolta
    Product
    Bizhub 458 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 458e
    Vendor
    Konicaminolta
    Product
    Bizhub 458e Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 4752
    Vendor
    Konicaminolta
    Product
    Bizhub 4752 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 558
    Vendor
    Konicaminolta
    Product
    Bizhub 558 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 558e
    Vendor
    Konicaminolta
    Product
    Bizhub 558e Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 658e
    Vendor
    Konicaminolta
    Product
    Bizhub 658e Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 758
    Vendor
    Konicaminolta
    Product
    Bizhub 758 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 808
    Vendor
    Konicaminolta
    Product
    Bizhub 808 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub 958
    Vendor
    Konicaminolta
    Product
    Bizhub 958 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C227
    Vendor
    Konicaminolta
    Product
    Bizhub C227 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C250i
    Vendor
    Konicaminolta
    Product
    Bizhub C250i Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C258
    Vendor
    Konicaminolta
    Product
    Bizhub C258 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C287
    Vendor
    Konicaminolta
    Product
    Bizhub C287 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C300i
    Vendor
    Konicaminolta
    Product
    Bizhub C300i Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C308
    Vendor
    Konicaminolta
    Product
    Bizhub C308 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C3300i
    Vendor
    Konicaminolta
    Product
    Bizhub C3300i Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C3320i
    Vendor
    Konicaminolta
    Product
    Bizhub C3320i Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C3350i
    Vendor
    Konicaminolta
    Product
    Bizhub C3350i Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C3351
    Vendor
    Konicaminolta
    Product
    Bizhub C3351 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C360i
    Vendor
    Konicaminolta
    Product
    Bizhub C360i Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C368
    Vendor
    Konicaminolta
    Product
    Bizhub C368 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C3851
    Vendor
    Konicaminolta
    Product
    Bizhub C3851 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C3851fs
    Vendor
    Konicaminolta
    Product
    Bizhub C3851fs Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C4000i
    Vendor
    Konicaminolta
    Product
    Bizhub C4000i Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C4050i
    Vendor
    Konicaminolta
    Product
    Bizhub C4050i Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C450i
    Vendor
    Konicaminolta
    Product
    Bizhub C450i Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C458
    Vendor
    Konicaminolta
    Product
    Bizhub C458 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C550i
    Vendor
    Konicaminolta
    Product
    Bizhub C550i Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C558
    Vendor
    Konicaminolta
    Product
    Bizhub C558 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C650i
    Vendor
    Konicaminolta
    Product
    Bizhub C650i Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C658
    Vendor
    Konicaminolta
    Product
    Bizhub C658 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C659
    Vendor
    Konicaminolta
    Product
    Bizhub C659 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub C759
    Vendor
    Konicaminolta
    Product
    Bizhub C759 Firmware
    Vendor
    Konicaminolta
    Product
    Bizhub Pro958
    Vendor
    Konicaminolta
    Product
    Bizhub Pro958 Firmware

    Exploits

    https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/

    Common Weakness Enumeration

    CWE-269 Improper Privilege Management

    Related CVEs

    CVE-2022-29586 (CVSS 7.4) — Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard…
    CVE-2022-29588 (CVSS 7.5) — Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html…
    CVE-2021-20871 (CVSS 6.5) — Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizh…
    CVE-2021-20870 (CVSS 4.6) — Improper handling of exceptional conditions vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35…
    CVE-2021-20869 (CVSS 6.5) — Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizh…
    CVE-2021-20868 (CVSS 4.5) — Incorrect authorization vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High