Lucene search

[email protected]CVE-2022-29587

HistoryMay 16, 2022 - 6:15 a.m.

CVE-2022-29587

2022-05-1606:15:08

CWE-269

[email protected]

web.nvd.nist.gov

cve-2022-29587

konica minolta

bizhub

mfp devices

chromium browser

root access

nvd

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

4 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

4.6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

JSON

Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges.

Affected configurations

NVD

Node

konicaminoltabizhub_226i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_226iMatch-

Node

konicaminoltabizhub_227_firmwareRange<2022-04-14

AND

konicaminoltabizhub_227Match-

Node

konicaminoltabizhub_246i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_246iMatch-

Node

konicaminoltabizhub_287_firmwareRange<2022-04-14

AND

konicaminoltabizhub_287Match-

Node

konicaminoltabizhub_306i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_306iMatch-

Node

konicaminoltabizhub_308_firmwareRange<2022-04-14

AND

konicaminoltabizhub_308Match-

Node

konicaminoltabizhub_308e_firmwareRange<2022-04-14

AND

konicaminoltabizhub_308eMatch-

Node

konicaminoltabizhub_367_firmwareRange<2022-04-14

AND

konicaminoltabizhub_367Match-

Node

konicaminoltabizhub_368_firmwareRange<2022-04-14

AND

konicaminoltabizhub_368Match-

Node

konicaminoltabizhub_368e_firmwareRange<2022-04-14

AND

konicaminoltabizhub_368eMatch-

Node

konicaminoltabizhub_4052_firmwareRange<2022-04-14

AND

konicaminoltabizhub_4052Match-

Node

konicaminoltabizhub_458_firmwareRange<2022-04-14

AND

konicaminoltabizhub_458Match-

Node

konicaminoltabizhub_458e_firmwareRange<2022-04-14

AND

konicaminoltabizhub_458eMatch-

Node

konicaminoltabizhub_4752_firmwareRange<2022-04-14

AND

konicaminoltabizhub_4752Match-

Node

konicaminoltabizhub_558_firmwareRange<2022-04-14

AND

konicaminoltabizhub_558Match-

Node

konicaminoltabizhub_558e_firmwareRange<2022-04-14

AND

konicaminoltabizhub_558eMatch-

Node

konicaminoltabizhub_658e_firmwareRange<2022-04-14

AND

konicaminoltabizhub_658eMatch-

Node

konicaminoltabizhub_758_firmwareRange<2022-04-14

AND

konicaminoltabizhub_758Match-

Node

konicaminoltabizhub_808_firmwareRange<2022-04-14

AND

konicaminoltabizhub_808Match-

Node

konicaminoltabizhub_958_firmwareRange<2022-04-14

AND

konicaminoltabizhub_958Match-

Node

konicaminoltabizhub_c227_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c227Match-

Node

konicaminoltabizhub_c250i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c250iMatch-

Node

konicaminoltabizhub_c258_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c258Match-

Node

konicaminoltabizhub_c287_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c287Match-

Node

konicaminoltabizhub_c300i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c300iMatch-

Node

konicaminoltabizhub_c308_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c308Match-

Node

konicaminoltabizhub_c3300i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c3300iMatch-

Node

konicaminoltabizhub_c3320i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c3320iMatch-

Node

konicaminoltabizhub_c3350i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c3350iMatch-

Node

konicaminoltabizhub_c3351_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c3351Match-

Node

konicaminoltabizhub_c360i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c360iMatch-

Node

konicaminoltabizhub_c368_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c368Match-

Node

konicaminoltabizhub_c3851_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c3851Match-

Node

konicaminoltabizhub_c3851fs_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c3851fsMatch-

Node

konicaminoltabizhub_c4000i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c4000iMatch-

Node

konicaminoltabizhub_c4050i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c4050iMatch-

Node

konicaminoltabizhub_c450i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c450iMatch-

Node

konicaminoltabizhub_c458_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c458Match-

Node

konicaminoltabizhub_c550i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c550iMatch-

Node

konicaminoltabizhub_c558_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c558Match-

Node

konicaminoltabizhub_c650i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c650iMatch-

Node

konicaminoltabizhub_c658_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c658Match-

Node

konicaminoltabizhub_c659_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c659Match-

Node

konicaminoltabizhub_c759_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c759Match-

Node

konicaminoltabizhub_pro958_firmwareRange<2022-04-14

AND

konicaminoltabizhub_pro958Match-

CPENameOperatorVersion
konicaminolta:bizhub_226i_firmwarekonicaminolta bizhub 226i firmwarelt2022-04-14

CPE	Name	Operator	Version
konicaminolta:bizhub_226i_firmware	konicaminolta bizhub 226i firmware	lt	2022-04-14

References

sec-consult.com/vulnerability-lab/

sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/

Social References

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

4 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

4.6 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.9%

JSON

Related for CVE-2022-29587

prion1 cvelist1 nvd1