medium4.0
CVE-2022-29587
Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges.
Impact
Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Konicaminolta | Bizhub 226i Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 227 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 246i Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 287 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 306i Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 308 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 308e Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 367 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 368 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 368e Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 4052 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 458 Firmware | before 2022-04-14 |
Weakness classification
References
- NVD record
- CVE.org record
- https://sec-consult.com/vulnerability-lab/
- https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/
- https://sec-consult.com/vulnerability-lab/
- https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/