Lucene search

[email protected]NVD:CVE-2022-29587

HistoryMay 16, 2022 - 6:15 a.m.

CVE-2022-29587

2022-05-1606:15:08

CWE-269

[email protected]

web.nvd.nist.gov

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

4 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0005 Low

EPSS

Percentile

18.0%

JSON

Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges.

Affected configurations

NVD

Node

konicaminoltabizhub_226i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_226iMatch-

Node

konicaminoltabizhub_227_firmwareRange<2022-04-14

AND

konicaminoltabizhub_227Match-

Node

konicaminoltabizhub_246i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_246iMatch-

Node

konicaminoltabizhub_287_firmwareRange<2022-04-14

AND

konicaminoltabizhub_287Match-

Node

konicaminoltabizhub_306i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_306iMatch-

Node

konicaminoltabizhub_308_firmwareRange<2022-04-14

AND

konicaminoltabizhub_308Match-

Node

konicaminoltabizhub_308e_firmwareRange<2022-04-14

AND

konicaminoltabizhub_308eMatch-

Node

konicaminoltabizhub_367_firmwareRange<2022-04-14

AND

konicaminoltabizhub_367Match-

Node

konicaminoltabizhub_368_firmwareRange<2022-04-14

AND

konicaminoltabizhub_368Match-

Node

konicaminoltabizhub_368e_firmwareRange<2022-04-14

AND

konicaminoltabizhub_368eMatch-

Node

konicaminoltabizhub_4052_firmwareRange<2022-04-14

AND

konicaminoltabizhub_4052Match-

Node

konicaminoltabizhub_458_firmwareRange<2022-04-14

AND

konicaminoltabizhub_458Match-

Node

konicaminoltabizhub_458e_firmwareRange<2022-04-14

AND

konicaminoltabizhub_458eMatch-

Node

konicaminoltabizhub_4752_firmwareRange<2022-04-14

AND

konicaminoltabizhub_4752Match-

Node

konicaminoltabizhub_558_firmwareRange<2022-04-14

AND

konicaminoltabizhub_558Match-

Node

konicaminoltabizhub_558e_firmwareRange<2022-04-14

AND

konicaminoltabizhub_558eMatch-

Node

konicaminoltabizhub_658e_firmwareRange<2022-04-14

AND

konicaminoltabizhub_658eMatch-

Node

konicaminoltabizhub_758_firmwareRange<2022-04-14

AND

konicaminoltabizhub_758Match-

Node

konicaminoltabizhub_808_firmwareRange<2022-04-14

AND

konicaminoltabizhub_808Match-

Node

konicaminoltabizhub_958_firmwareRange<2022-04-14

AND

konicaminoltabizhub_958Match-

Node

konicaminoltabizhub_c227_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c227Match-

Node

konicaminoltabizhub_c250i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c250iMatch-

Node

konicaminoltabizhub_c258_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c258Match-

Node

konicaminoltabizhub_c287_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c287Match-

Node

konicaminoltabizhub_c300i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c300iMatch-

Node

konicaminoltabizhub_c308_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c308Match-

Node

konicaminoltabizhub_c3300i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c3300iMatch-

Node

konicaminoltabizhub_c3320i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c3320iMatch-

Node

konicaminoltabizhub_c3350i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c3350iMatch-

Node

konicaminoltabizhub_c3351_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c3351Match-

Node

konicaminoltabizhub_c360i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c360iMatch-

Node

konicaminoltabizhub_c368_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c368Match-

Node

konicaminoltabizhub_c3851_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c3851Match-

Node

konicaminoltabizhub_c3851fs_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c3851fsMatch-

Node

konicaminoltabizhub_c4000i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c4000iMatch-

Node

konicaminoltabizhub_c4050i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c4050iMatch-

Node

konicaminoltabizhub_c450i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c450iMatch-

Node

konicaminoltabizhub_c458_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c458Match-

Node

konicaminoltabizhub_c550i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c550iMatch-

Node

konicaminoltabizhub_c558_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c558Match-

Node

konicaminoltabizhub_c650i_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c650iMatch-

Node

konicaminoltabizhub_c658_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c658Match-

Node

konicaminoltabizhub_c659_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c659Match-

Node

konicaminoltabizhub_c759_firmwareRange<2022-04-14

AND

konicaminoltabizhub_c759Match-

Node

konicaminoltabizhub_pro958_firmwareRange<2022-04-14

AND

konicaminoltabizhub_pro958Match-

References

sec-consult.com/vulnerability-lab/

sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:C/I:N/A:N

4 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0005 Low

EPSS

Percentile

18.0%

JSON

Related for NVD:CVE-2022-29587

cve1 prion1 cvelist1