high7.5
CVE-2022-29588
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.
Impact
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Konicaminolta | Bizhub 226i Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 227 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 246i Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 287 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 306i Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 308 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 308e Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 367 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 368 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 368e Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 4052 Firmware | before 2022-04-14 |
| Konicaminolta | Bizhub 458 Firmware | before 2022-04-14 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/167166/Konica-Minolta-bizhub-MFP-Printer-Terminal-Sandbox-Escape.html
- https://sec-consult.com/vulnerability-lab/
- http://packetstormsecurity.com/files/167166/Konica-Minolta-bizhub-MFP-Printer-Terminal-Sandbox-Escape.html
- https://sec-consult.com/vulnerability-lab/