high7.4
CVE-2022-29586
Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape.
Impact
Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Konicaminolta | Bizhub 226i Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 227 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 246i Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 287 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 306i Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 308 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 308e Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 367 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 368 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 368e Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 4052 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 458 Firmware | before 2022-04-14 |
References
- NVD record
- CVE.org record
- https://sec-consult.com/vulnerability-lab/
- https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/
- https://sec-consult.com/vulnerability-lab/
- https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/