CVE-2022-29588
Konica Minolta bizhub MFP Printer Terminal Sandbox Escape
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.
Los dispositivos bizhub MFP de Konica Minolta versiones anteriores a 14-04-2022, usan el almacenamiento de contraseñas en texto sin cifrar para los archivos /var/log/nginx/html/ADMINPASS y /etc/shadow
Multiple Konica Minolta bizhub MFP printer terminals suffer from a sandbox escape with root access and have clear-text password vulnerabilities.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-04-22 CVE Reserved
- 2022-05-13 CVE Published
- 2023-12-07 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-522: Insufficiently Protected Credentials
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://packetstormsecurity.com/files/167166/Konica-Minolta-bizhub-MFP-Printer-Terminal-Sandbox-Escape.html | Third Party Advisory |
|
| https://sec-consult.com/vulnerability-lab | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 226i Firmware Search vendor "Konicaminolta" for product "Bizhub 226i Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 226i Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 226i Search vendor "Konicaminolta" for product "Bizhub 226i" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 227 Firmware Search vendor "Konicaminolta" for product "Bizhub 227 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 227 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 227 Search vendor "Konicaminolta" for product "Bizhub 227" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 246i Firmware Search vendor "Konicaminolta" for product "Bizhub 246i Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 246i Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 246i Search vendor "Konicaminolta" for product "Bizhub 246i" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 287 Firmware Search vendor "Konicaminolta" for product "Bizhub 287 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 287 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 287 Search vendor "Konicaminolta" for product "Bizhub 287" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 306i Firmware Search vendor "Konicaminolta" for product "Bizhub 306i Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 306i Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 306i Search vendor "Konicaminolta" for product "Bizhub 306i" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 308 Firmware Search vendor "Konicaminolta" for product "Bizhub 308 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 308 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 308 Search vendor "Konicaminolta" for product "Bizhub 308" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 308e Firmware Search vendor "Konicaminolta" for product "Bizhub 308e Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 308e Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 308e Search vendor "Konicaminolta" for product "Bizhub 308e" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 367 Firmware Search vendor "Konicaminolta" for product "Bizhub 367 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 367 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 367 Search vendor "Konicaminolta" for product "Bizhub 367" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 368 Firmware Search vendor "Konicaminolta" for product "Bizhub 368 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 368 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 368 Search vendor "Konicaminolta" for product "Bizhub 368" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 368e Firmware Search vendor "Konicaminolta" for product "Bizhub 368e Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 368e Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 368e Search vendor "Konicaminolta" for product "Bizhub 368e" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 4052 Firmware Search vendor "Konicaminolta" for product "Bizhub 4052 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 4052 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 4052 Search vendor "Konicaminolta" for product "Bizhub 4052" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 458 Firmware Search vendor "Konicaminolta" for product "Bizhub 458 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 458 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 458 Search vendor "Konicaminolta" for product "Bizhub 458" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 458e Firmware Search vendor "Konicaminolta" for product "Bizhub 458e Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 458e Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 458e Search vendor "Konicaminolta" for product "Bizhub 458e" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 4752 Firmware Search vendor "Konicaminolta" for product "Bizhub 4752 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 4752 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 4752 Search vendor "Konicaminolta" for product "Bizhub 4752" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 558 Firmware Search vendor "Konicaminolta" for product "Bizhub 558 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 558 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 558 Search vendor "Konicaminolta" for product "Bizhub 558" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 558e Firmware Search vendor "Konicaminolta" for product "Bizhub 558e Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 558e Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 558e Search vendor "Konicaminolta" for product "Bizhub 558e" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 658e Firmware Search vendor "Konicaminolta" for product "Bizhub 658e Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 658e Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 658e Search vendor "Konicaminolta" for product "Bizhub 658e" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 758 Firmware Search vendor "Konicaminolta" for product "Bizhub 758 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 758 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 758 Search vendor "Konicaminolta" for product "Bizhub 758" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 808 Firmware Search vendor "Konicaminolta" for product "Bizhub 808 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 808 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 808 Search vendor "Konicaminolta" for product "Bizhub 808" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub 958 Firmware Search vendor "Konicaminolta" for product "Bizhub 958 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub 958 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub 958 Search vendor "Konicaminolta" for product "Bizhub 958" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C227 Firmware Search vendor "Konicaminolta" for product "Bizhub C227 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C227 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C227 Search vendor "Konicaminolta" for product "Bizhub C227" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C250i Firmware Search vendor "Konicaminolta" for product "Bizhub C250i Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C250i Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C250i Search vendor "Konicaminolta" for product "Bizhub C250i" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C258 Firmware Search vendor "Konicaminolta" for product "Bizhub C258 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C258 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C258 Search vendor "Konicaminolta" for product "Bizhub C258" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C287 Firmware Search vendor "Konicaminolta" for product "Bizhub C287 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C287 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C287 Search vendor "Konicaminolta" for product "Bizhub C287" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C300i Firmware Search vendor "Konicaminolta" for product "Bizhub C300i Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C300i Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C300i Search vendor "Konicaminolta" for product "Bizhub C300i" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C308 Firmware Search vendor "Konicaminolta" for product "Bizhub C308 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C308 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C308 Search vendor "Konicaminolta" for product "Bizhub C308" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C3300i Firmware Search vendor "Konicaminolta" for product "Bizhub C3300i Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C3300i Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C3300i Search vendor "Konicaminolta" for product "Bizhub C3300i" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C3320i Firmware Search vendor "Konicaminolta" for product "Bizhub C3320i Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C3320i Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C3320i Search vendor "Konicaminolta" for product "Bizhub C3320i" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C3350i Firmware Search vendor "Konicaminolta" for product "Bizhub C3350i Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C3350i Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C3350i Search vendor "Konicaminolta" for product "Bizhub C3350i" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C3351 Firmware Search vendor "Konicaminolta" for product "Bizhub C3351 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C3351 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C3351 Search vendor "Konicaminolta" for product "Bizhub C3351" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C360i Firmware Search vendor "Konicaminolta" for product "Bizhub C360i Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C360i Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C360i Search vendor "Konicaminolta" for product "Bizhub C360i" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C368 Firmware Search vendor "Konicaminolta" for product "Bizhub C368 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C368 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C368 Search vendor "Konicaminolta" for product "Bizhub C368" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C3851 Firmware Search vendor "Konicaminolta" for product "Bizhub C3851 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C3851 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C3851 Search vendor "Konicaminolta" for product "Bizhub C3851" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C3851fs Firmware Search vendor "Konicaminolta" for product "Bizhub C3851fs Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C3851fs Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C3851fs Search vendor "Konicaminolta" for product "Bizhub C3851fs" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C4000i Firmware Search vendor "Konicaminolta" for product "Bizhub C4000i Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C4000i Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C4000i Search vendor "Konicaminolta" for product "Bizhub C4000i" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C4050i Firmware Search vendor "Konicaminolta" for product "Bizhub C4050i Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C4050i Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C4050i Search vendor "Konicaminolta" for product "Bizhub C4050i" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C450i Firmware Search vendor "Konicaminolta" for product "Bizhub C450i Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C450i Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C450i Search vendor "Konicaminolta" for product "Bizhub C450i" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C458 Firmware Search vendor "Konicaminolta" for product "Bizhub C458 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C458 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C458 Search vendor "Konicaminolta" for product "Bizhub C458" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C550i Firmware Search vendor "Konicaminolta" for product "Bizhub C550i Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C550i Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C550i Search vendor "Konicaminolta" for product "Bizhub C550i" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C558 Firmware Search vendor "Konicaminolta" for product "Bizhub C558 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C558 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C558 Search vendor "Konicaminolta" for product "Bizhub C558" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C650i Firmware Search vendor "Konicaminolta" for product "Bizhub C650i Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C650i Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C650i Search vendor "Konicaminolta" for product "Bizhub C650i" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C658 Firmware Search vendor "Konicaminolta" for product "Bizhub C658 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C658 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C658 Search vendor "Konicaminolta" for product "Bizhub C658" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C659 Firmware Search vendor "Konicaminolta" for product "Bizhub C659 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C659 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C659 Search vendor "Konicaminolta" for product "Bizhub C659" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub C759 Firmware Search vendor "Konicaminolta" for product "Bizhub C759 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub C759 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub C759 Search vendor "Konicaminolta" for product "Bizhub C759" | - | - |
Safe
|
| Konicaminolta Search vendor "Konicaminolta" | Bizhub Pro958 Firmware Search vendor "Konicaminolta" for product "Bizhub Pro958 Firmware" | < 2022-04-14 Search vendor "Konicaminolta" for product "Bizhub Pro958 Firmware" and version " < 2022-04-14" | - |
Affected
| in | Konicaminolta Search vendor "Konicaminolta" | Bizhub Pro958 Search vendor "Konicaminolta" for product "Bizhub Pro958" | - | - |
Safe
|