CVE-2022-29586

The CVE-2022-29586 issue affects Konica Minolta bizhub MFP devices released before 2022-04-14. The root cause is a sandbox escape vulnerability that allows an attacker with physical access to trigger a kiosk-mode escape by connecting a USB keyboard, pressing F12, and escaping the kiosk. The impac...

CVE-2022-29587

CVE-2022-29587 affects Konica Minolta bizhub MFP devices (pre-2022-04-14) where an internal Chromium browser runs with root privileges. The root/ sandbox-escape risk could allow elevated device access and plaintext password exposure (per CNNVD guidance). Documents consistently identify the compon...

CVE-2022-29587

Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root aka superuser access privileges...

CVE-2022-29588

CVE-2022-29588 affects Konica Minolta bizhub MFP devices before 2022-04-14, where credentials are stored in cleartext in /var/log/nginx/html/ADMINPASS and /etc/shadow. The root cause is cleartext password storage on the device, leading to potential password disclosure and confidentiality impact. ...

CVE-2022-29588

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files...

PT-2022-19710 · Konica Minolta +1 · Konica Minolta Bizhub Mfp +1

Name of the Vulnerable Software and Affected Versions: Konica Minolta bizhub MFP devices affected versions not specified Description: The issue concerns an internal Chromium browser in Konica Minolta bizhub MFP devices that executes with root access privileges. This could potentially allow for...

PT-2022-19709 · Konica Minolta · Konica Minolta Bizhub Mfp

Name of the Vulnerable Software and Affected Versions: Konica Minolta bizhub MFP devices before 2022-04-14 Description: The issue allows a Sandbox Escape. To exploit this, an attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode. Recommendations: For Konica...

(Pwn2Own) HP LaserJet Pro MFP M283fdw ScanJobs Memory Corruption Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of HP LaserJet Pro MFP M283fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ScanJobs API. Crafted data in a request can cause...

Security Bulletin: Mobilefirst is affected by a log4j vulnerability (CVE-2021-4104)

Summary A vulnerability in the Apache Log4j open source library has been reported in CVE-2021-4104. The version of log4j bundled within MFP 8.0 is 1.x and hence impacted by vulnerability CVE-2021-4104. Vulnerability Details CVEID: CVE-2021-4104 DESCRIPTION: Apache Log4j could allow a remote...

KONICA MINOLTA MFPs and printing systems 信息泄露漏洞

KONICA MINOLTA MFPs and printing systems is a printer from KONICA MINOLTA. An information disclosure vulnerability exists in KONICA MINOLTA MFPs and printing systems, which arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could...

PT-2021-11526 · Hewlett Packard · Laserjet Managed Mfp E62665 Firmware +195

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows for arbitrary code execution during installation with certain driver software or application packages. Recommendations: At the moment,...

Unauthorized Access Vulnerability in Dell C3765dnf Color MFPs

The C3765dnf Color MFP is a color laser printer from Dell. An unauthorized access vulnerability exists in the Dell C3765dnf Color MFP, which can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Dell Color MFP S2825cdn

The Dell Color MFP S2825cdn is a printer device. An unauthorized access vulnerability exists in the Dell Color MFP S2825cdn, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in HP LaserJet MFP M426fdw Printer

Hewlett-Packard HP is one of the information technology IT companies, founded in 1939 1. Headquartered in Palo Alto, California, USA. Hewlett-Packard has three business groups: Information Products Group, Printing and Imaging Systems Group and Enterprise Computer Professional Services Group. An...

Unauthorized access vulnerability in HP PageWide Pro 477dw MFP (CNVD-2021-47158)

Hewlett-Packard Trading Shanghai Co., Ltd. is a company whose business scope includes computer hardware and software equipment, printing equipment, imaging equipment, and communication equipment. An unauthorized access vulnerability exists in the HP PageWide Pro 477dw MFP, which can be exploited ...

Unauthorized Access Vulnerability in HP LaserJet MFP M227sdn

Hewlett-Packard HP is one of the information technology IT companies, founded in 1939 1. Headquartered in Palo Alto, California, USA. Hewlett-Packard has three business groups: Information Products Group, Printing and Imaging Systems Group and Enterprise Computer Professional Services Group. An...

Unauthorized Access Vulnerability in HP Color LaserJet MFP M277n

HP-Color-LaserJet-MFP-M277n is a printer from HP Trading Shanghai Co. An unauthorized access vulnerability exists in the HP Color LaserJet MFP M277n, which can be exploited by attackers to obtain sensitive information...

HP PageWide Pro 477dw MFP has an unauthorized access vulnerability

Hewlett-Packard Trading Shanghai Co., Ltd. is a company whose business scope includes computer hardware and software equipment, printing equipment, imaging equipment, communication equipment and so on. An unauthorized access vulnerability exists in HP PageWide Pro 477dw MFP, which can be exploite...

HPSBPI03688 rev. 1 - Certain HP Printer and MFP products - Cross-Site Scripting (XSS)

Potential Security Impact Cross-site Scripting XSS Source: HP, HP Product Security Response Team PSRT Reported by: The jQuery Foundation VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP printers and MFPs. In jQuery versions before 3.5.0, passing HTML fro...

HPSBPI03686 rev. 1 - Certain HP Enterprise MFP products: Elevation of Privilege

Potential Security Impact Elevation of privilege Source: HP, HP Product Security Response Team PSRT Reported by: HP VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP multifunction printers MFPs. The vulnerability may lead to elevation of privilege when...