Page 2 of 11 results (0.004 seconds)

CVSS: 4.6EPSS: 0%CPEs: 174EXPL: 0

CVE-2021-20870

https://notcve.org/view.php?id=CVE-2021-20870

Improper handling of exceptional conditions vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier, bizhub 750i/650i/550i/450i G00-37 and earlier, bizhub 360i/300i G00-33 and earlier, bizhub C287i/C257i/C227i G00-19 and earlier, bizhub 306i/266i/246i/226i G00-B6 and earlier, bizhub C759/C659 GC7-X8 and earlier, bizhub C658/C558/C458 GC7-X8 and earlier, bizhub 958/808/758 GC7-X8 and earlier, bizhub 658e/558e/458e GC7-X8 and earlier, bizhub C287/C227 GC7-X8 and earlier, bizhub 287/227 GC7-X8 and earlier, bizhub 368e/308e GC7-X8 and earlier, bizhub C368/C308/C258 GC9-X4 and earlier, bizhub 558/458/368/308 GC9-X4 and earlier, bizhub C754e/C654e GDQ-M0 and earlier, bizhub 754e/654e GDQ-M0 and earlier, bizhub C554e/C454e GDQ-M1 and earlier, bizhub C364e/C284e/C224e GDQ-M1 and earlier, bizhub 554e/454e/364e/284e/224e GDQ-M1 and earlier, bizhub C754/C654 C554/C454 GR1-M0 and earlier, bizhub C364/C284/C224 GR1-M0 and earlier, bizhub 754/654 GR1-M0 and earlier, bizhub C4050i/C3350i/C4000i/C3300i G00-B6 and earlier, bizhub C3320i G00-B6 and earlier, bizhub 4750i/4050i G00-22 and earlier, bizhub 4700i G00-22 and earlier, bizhub C3851FS/C3851/C3351 GC9-X4 and earlier, bizhub 4752/4052 GC9-X4 and earlier, bizhub C3850/C3350/3850FS, bizhub 4750/4050, bizhub C3110, bizhub C3100P) allows a physical attacker to obtain unsent scanned image data when scanned data transmission is stopped due to the network error by ejecting a HDD before the scan job times out. Una vulnerabilidad de manejo inapropiado de condiciones excepcionales en la serie bizhub de KONICA MINOLTA (bizhub versiones C750i G00-35 y anteriores, bizhub versiones C650i/C550i/C450i G00-B6 y anteriores, bizhub versiones C360i/C300i/C250i G00-B6 y anteriores, bizhub versiones 750i/650i/550i/450i G00-37 y anteriores, bizhub versiones 360i/300i G00-33 y anteriores, bizhub versiones C287i/C257i/C227i G00-19 y anteriores, bizhub versiones 306i/266i/246i/226i G00-B6 y anteriores, bizhub versiones C759/C659 GC7-X8 y anteriores, bizhub versiones C658/C558/C458 GC7-X8 y anteriores, bizhub versiones 958/808/758 GC7-X8 y anteriores, bizhub versiones 658e/558e/458e GC7-X8 y anteriores, bizhub versiones C287/C227 GC7-X8 y anteriores, bizhub versiones 287/227 GC7-X8 y anteriores, bizhub versiones 368e/308e GC7-X8 y anteriores, bizhub versiones C368/C308/C258 GC9-X4 y anteriores, bizhub versiones 558/458/368/308 GC9-X4 y anteriores, bizhub versiones C754e/C654e GDQ-M0 y anteriores, bizhub versiones 754e/654e GDQ-M0 y anteriores, bizhub versiones C554e/C454e GDQ-M1 y anteriores, bizhub versiones C364e/C284e/C224e GDQ-M1 y anteriores, bizhub versiones 554e/454e/364e/284e/224e GDQ-M1 y anteriores, bizhub versiones C754/C654 C554/C454 GR1-M0 y anteriores, bizhub versiones C364/C284/C224 GR1-M0 y anteriores, bizhub versiones 754/654 GR1-M0 y anteriores, bizhub versiones C4050i/C3350i/C4000i/C3300i G00-B6 y anteriores, bizhub versiones C3320i G00-B6 y anteriores, bizhub versiones 4750i/4050i G00-22 y anteriores, bizhub versiones 4700i G00-22 y anteriores, bizhub versiones C3851FS/C3851/C3351 GC9-X4 y anteriores, bizhub versiones 4752/4052 GC9-X4 y anteriores, bizhub versiones C3850/C3350/3850FS, bizhub versiones 4750/4050, bizhub versiones C3110, bizhub versiones C3100P) permite a un atacante físico obtener datos de imágenes escaneadas no enviadas cuando la transmisión de datos escaneados se detiene debido a un error de red al expulsar un disco duro antes de que el trabajo de escaneo termine • https://jvn.jp/en/vu/JVNVU95192472/index.html https://jvn.jp/vu/JVNVU95192472/index.html https://www.konicaminolta.com/global/newsroom/topics/2021/1224-01-01.html https://www.konicaminolta.jp/business/support/important/211224_01_01.html • CWE-755: Improper Handling of Exceptional Conditions •

CVSS: 6.5EPSS: 0%CPEs: 160EXPL: 0

CVE-2021-20869

https://notcve.org/view.php?id=CVE-2021-20869

Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier, bizhub 750i/650i/550i/450i G00-37 and earlier, bizhub 360i/300i G00-33 and earlier, bizhub C287i/C257i/C227i G00-19 and earlier, bizhub 306i/266i/246i/226i G00-B6 and earlier, bizhub C759/C659 GC7-X8 and earlier, bizhub C658/C558/C458 GC7-X8 and earlier, bizhub 958/808/758 GC7-X8 and earlier, bizhub 658e/558e/458e GC7-X8 and earlier, bizhub C287/C227 GC7-X8 and earlier, bizhub 287/227 GC7-X8 and earlier, bizhub 368e/308e GC7-X8 and earlier, bizhub C368/C308/C258 GC9-X4 and earlier, bizhub 558/458/368/308 GC9-X4 and earlier, bizhub C754e/C654e GDQ-M0 and earlier, bizhub 754e/654e GDQ-M0 and earlier, bizhub C554e/C454e GDQ-M1 and earlier, bizhub C364e/C284e/C224e GDQ-M1 and earlier, bizhub 554e/454e/364e/284e/224e GDQ-M1 and earlier, bizhub C754/C654 C554/C454 GR1-M0 and earlier, bizhub C364/C284/C224 GR1-M0 and earlier, bizhub 754/654 GR1-M0 and earlier, bizhub C4050i/C3350i/C4000i/C3300i G00-B6 and earlier, bizhub C3320i G00-B6 and earlier, bizhub 4750i/4050i G00-22 and earlier, bizhub 4700i G00-22 and earlier, bizhub C3851FS/C3851/C3351 GC9-X4 and earlier, and bizhub 4752/4052 GC9-X4 and earlier) allows an attacker on the adjacent network to obtain some of user credentials if LDAP server authentication is enabled via a specific SOAP message. Una vulnerabilidad de exposición de información confidencial a un actor no autorizado en la serie bizhub de KONICA MINOLTA (bizhub versiones C750i G00-35 y anteriores, bizhub versiones C650i/C550i/C450i G00-B6 y anteriores, bizhub versiones C360i/C300i/C250i G00-B6 y anteriores, bizhub versiones 750i/650i/550i/450i G00-37 y anteriores, bizhub versiones 360i/300i G00-33 y anteriores, bizhub versiones C287i/C257i/C227i G00-19 y anteriores, bizhub versiones 306i/266i/246i/226i G00-B6 y anteriores, bizhub versiones C759/C659 GC7-X8 y anteriores, bizhub versiones C658/C558/C458 GC7-X8 y anteriores, bizhub versiones 958/808/758 GC7-X8 y anteriores, bizhub versiones 658e/558e/458e GC7-X8 y anteriores, bizhub versiones C287/C227 GC7-X8 y anteriores, bizhub versiones 287/227 GC7-X8 y anteriores, bizhub versiones 368e/308e GC7-X8 y anteriores, bizhub versiones C368/C308/C258 GC9-X4 y anteriores, bizhub versiones 558/458/368/308 GC9-X4 y anteriores, bizhub versiones C754e/C654e GDQ-M0 y anteriores, bizhub versiones 754e/654e GDQ-M0 y anteriores, bizhub versiones C554e/C454e GDQ-M1 y anteriores, bizhub versiones C364e/C284e/C224e GDQ-M1 y anteriores, bizhub versiones 554e/454e/364e/284e/224e GDQ-M1 y anteriores, bizhub versiones C754/C654 C554/C454 GR1-M0 y anteriores, bizhub versiones C364/C284/C224 GR1-M0 y anteriores, bizhub versiones 754/654 GR1-M0 y anteriores, bizhub versiones C4050i/C3350i/C4000i/C3300i G00-B6 y anteriores, bizhub versiones C3320i G00-B6 y anteriores, bizhub versiones 4750i/4050i G00-22 y anteriores, bizhub versiones 4700i G00-22 y anteriores, bizhub versiones C3851FS/C3851/C3351 GC9-X4 y anteriores, y bizhub versiones 4752/4052 GC9-X4 y anteriores) permite a un atacante en la red adyacente obtener algunas de las credenciales de usuario si la autenticación del servidor LDAP está habilitada por medio de un mensaje SOAP específico • https://jvn.jp/en/vu/JVNVU95192472/index.html https://jvn.jp/vu/JVNVU95192472/index.html https://www.konicaminolta.com/global/newsroom/topics/2021/1224-01-01.html https://www.konicaminolta.jp/business/support/important/211224_01_01.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 4.5EPSS: 0%CPEs: 160EXPL: 0

CVE-2021-20868

https://notcve.org/view.php?id=CVE-2021-20868

Incorrect authorization vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier, bizhub 750i/650i/550i/450i G00-37 and earlier, bizhub 360i/300i G00-33 and earlier, bizhub C287i/C257i/C227i G00-19 and earlier, bizhub 306i/266i/246i/226i G00-B6 and earlier, bizhub C759/C659 GC7-X8 and earlier, bizhub C658/C558/C458 GC7-X8 and earlier, bizhub 958/808/758 GC7-X8 and earlier, bizhub 658e/558e/458e GC7-X8 and earlier, bizhub C287/C227 GC7-X8 and earlier, bizhub 287/227 GC7-X8 and earlier, bizhub 368e/308e GC7-X8 and earlier, bizhub C368/C308/C258 GC9-X4 and earlier, bizhub 558/458/368/308 GC9-X4 and earlier, bizhub C754e/C654e GDQ-M0 and earlier, bizhub 754e/654e GDQ-M0 and earlier, bizhub C554e/C454e GDQ-M1 and earlier, bizhub C364e/C284e/C224e GDQ-M1 and earlier, bizhub 554e/454e/364e/284e/224e GDQ-M1 and earlier, bizhub C754/C654 C554/C454 GR1-M0 and earlier, bizhub C364/C284/C224 GR1-M0 and earlier, bizhub 754/654 GR1-M0 and earlier, bizhub C4050i/C3350i/C4000i/C3300i G00-B6 and earlier, bizhub C3320i G00-B6 and earlier, bizhub 4750i/4050i G00-22 and earlier, bizhub 4700i G00-22 and earlier, bizhub C3851FS/C3851/C3351 GC9-X4 and earlier, and bizhub 4752/4052 GC9-X4 and earlier) allows an attacker on the adjacent network to obtain user credentials if external server authentication is enabled via a specific SOAP message sent by an administrative user. Una vulnerabilidad de autorización incorrecta en la serie bizhub de KONICA MINOLTA (bizhub versiones C750i G00-35 y anteriores, bizhub versiones C650i/C550i/C450i G00-B6 y anteriores, bizhub versiones C360i/C300i/C250i G00-B6 y anteriores, bizhub versiones 750i/650i/550i/450i G00-37 y anteriores, bizhub versiones 360i/300i G00-33 y anteriores, bizhub versiones C287i/C257i/C227i G00-19 y anteriores, bizhub versiones 306i/266i/246i/226i G00-B6 y anteriores, bizhub versiones C759/C659 GC7-X8 y anteriores, bizhub versiones C658/C558/C458 GC7-X8 y anteriores, bizhub versiones 958/808/758 GC7-X8 y anteriores, bizhub versiones 658e/558e/458e GC7-X8 y anteriores, bizhub versiones C287/C227 GC7-X8 y anteriores, bizhub versiones 287/227 GC7-X8 y anteriores, bizhub versiones 368e/308e GC7-X8 y anteriores, bizhub versiones C368/C308/C258 GC9-X4 y anteriores, bizhub versiones 558/458/368/308 GC9-X4 y anteriores, bizhub versiones C754e/C654e GDQ-M0 y anteriores, bizhub versiones 754e/654e GDQ-M0 y anteriores, bizhub versiones C554e/C454e GDQ-M1 y anteriores, bizhub versiones C364e/C284e/C224e GDQ-M1 y anteriores, bizhub versiones 554e/454e/364e/284e/224e GDQ-M1 y anteriores, bizhub versiones C754/C654 C554/C454 GR1-M0 y anteriores, bizhub versiones C364/C284/C224 GR1-M0 y anteriores, bizhub versiones 754/654 GR1-M0 y anteriores, bizhub versiones C4050i/C3350i/C4000i/C3300i G00-B6 y anteriores, bizhub versiones C3320i G00-B6 y anteriores, bizhub versiones 4750i/4050i G00-22 y anteriores, bizhub versiones 4700i G00-22 y anteriores, bizhub versiones C3851FS/C3851/C3351 GC9-X4 y anteriores, y bizhub versiones 4752/4052 GC9-X4 y anteriores) permite a un atacante en la red adyacente obtener credenciales de usuario si la autenticación del servidor externo está habilitada por medio de un mensaje SOAP específico enviado por un usuario administrativo • https://jvn.jp/en/vu/JVNVU95192472/index.html https://jvn.jp/vu/JVNVU95192472/index.html https://www.konicaminolta.com/global/newsroom/topics/2021/1224-01-01.html https://www.konicaminolta.jp/business/support/important/211224_01_01.html • CWE-863: Incorrect Authorization •

CVSS: 7.5EPSS: 81%CPEs: 1EXPL: 4

CVE-2015-7768 – Konica Minolta FTP Utility 1.00 - (Authenticated) CWD Command Overflow (SEH)

https://notcve.org/view.php?id=CVE-2015-7768

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command. Desbordamiento de buffer en Konica Minolta FTP Utility 1.0 permite a atacantes remotos ejecutar código arbitrario a través de un comando CWD largo. • https://www.exploit-db.com/exploits/38254 https://www.exploit-db.com/exploits/39215 http://packetstormsecurity.com/files/133621/Konica-Minolta-FTP-Utility-1.00-Post-Auth-CWD-Command-SEH-Overflow.html http://packetstormsecurity.com/files/137252/Konica-Minolta-FTP-Utility-1.0-SEH-Buffer-Overflow.html http://www.rapid7.com/db/modules/exploit/windows/ftp/kmftp_utility_cwd • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.5EPSS: 26%CPEs: 1EXPL: 2

CVE-2015-7767 – Konica Minolta FTP Utility 1.0 - Remote Denial of Service (PoC)

https://notcve.org/view.php?id=CVE-2015-7767

Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long USER command. Desbordamiento de buffer en Konica Minolta FTP Utility 1.0 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (caída de la aplicación) a través de un comando USER largo. • https://www.exploit-db.com/exploits/37908 https://www.exploit-db.com/exploits/38252 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •