CVE-2022-29587

Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4 MEDIUM
PHYSICAL
HIGH
LOW
CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 29%
VendorProductVersion
konicaminoltabizhub_226i_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_227_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_246i_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_287_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_306i_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_308_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_308e_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_367_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_368_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_368e_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_4052_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_458_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_458e_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_4752_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_558_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_558e_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_658e_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_758_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_808_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_958_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c227_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c250i_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c258_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c287_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c300i_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c308_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c3300i_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c3320i_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c3350i_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c3351_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c360i_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c368_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c3851_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c3851fs_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c4000i_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c4050i_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c450i_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c458_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c550i_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c558_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c650i_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c658_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c659_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_c759_firmware
𝑥
< 2022-04-14
konicaminoltabizhub_pro958_firmware
𝑥
< 2022-04-14
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://sec-consult.com/vulnerability-lab/
https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/
https://sec-consult.com/vulnerability-lab/
https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/