CVE-2022-29588

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files...

PT-2022-19710 · Konica Minolta +1 · Konica Minolta Bizhub Mfp +1

Name of the Vulnerable Software and Affected Versions: Konica Minolta bizhub MFP devices affected versions not specified Description: The issue concerns an internal Chromium browser in Konica Minolta bizhub MFP devices that executes with root access privileges. This could potentially allow for...

PT-2022-19709 · Konica Minolta · Konica Minolta Bizhub Mfp

Name of the Vulnerable Software and Affected Versions: Konica Minolta bizhub MFP devices before 2022-04-14 Description: The issue allows a Sandbox Escape. To exploit this, an attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode. Recommendations: For Konica...

PT-2022-19711

Name of the Vulnerable Software and Affected Versions Konica Minolta bizhub MFP devices versions prior to 2022-04-14 Description The issue concerns the use of cleartext password storage for sensitive files, specifically the /var/log/nginx/html/ADMINPASS and /etc/shadow files. This storage method...

CVE-2022-29586: Undefined Security Weakness

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode...

CVE-2022-29587: Improper Privilege Management

Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root aka superuser access privileges...

CVE-2022-29588: Insufficiently Protected Credentials

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files...

(Pwn2Own) HP LaserJet Pro MFP M283fdw ScanJobs Memory Corruption Denial-of-Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of HP LaserJet Pro MFP M283fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ScanJobs API. Crafted data in a request can cause...

Security Bulletin: Mobilefirst is affected by a log4j vulnerability (CVE-2021-4104)

Summary A vulnerability in the Apache Log4j open source library has been reported in CVE-2021-4104. The version of log4j bundled within MFP 8.0 is 1.x and hence impacted by vulnerability CVE-2021-4104. Vulnerability Details CVEID: CVE-2021-4104 DESCRIPTION: Apache Log4j could allow a remote...

PT-2022-1905

Name of the Vulnerable Software and Affected Versions HP Print devices affected versions not specified Description The issue is related to a stack-based buffer overflow in the firmware of HP Print devices. This could allow a remote attacker to execute arbitrary code, potentially leading to...

KONICA MINOLTA MFPs and printing systems 信息泄露漏洞

KONICA MINOLTA MFPs and printing systems is a printer from KONICA MINOLTA. An information disclosure vulnerability exists in KONICA MINOLTA MFPs and printing systems, which arises from errors such as configuration during operation of a networked system or product. An unauthorized attacker could...

PT-2021-11526 · Hewlett Packard · Laserjet Managed Mfp E62665 Firmware +195

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows for arbitrary code execution during installation with certain driver software or application packages. Recommendations: At the moment,...

Unauthorized Access Vulnerability in Dell C3765dnf Color MFPs

The C3765dnf Color MFP is a color laser printer from Dell. An unauthorized access vulnerability exists in the Dell C3765dnf Color MFP, which can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Dell Color MFP S2825cdn

The Dell Color MFP S2825cdn is a printer device. An unauthorized access vulnerability exists in the Dell Color MFP S2825cdn, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in HP LaserJet MFP M426fdw Printer

Hewlett-Packard HP is one of the information technology IT companies, founded in 1939 1. Headquartered in Palo Alto, California, USA. Hewlett-Packard has three business groups: Information Products Group, Printing and Imaging Systems Group and Enterprise Computer Professional Services Group. An...

Unauthorized access vulnerability in HP PageWide Pro 477dw MFP (CNVD-2021-47158)

Hewlett-Packard Trading Shanghai Co., Ltd. is a company whose business scope includes computer hardware and software equipment, printing equipment, imaging equipment, and communication equipment. An unauthorized access vulnerability exists in the HP PageWide Pro 477dw MFP, which can be exploited ...

Unauthorized Access Vulnerability in HP LaserJet MFP M227sdn

Hewlett-Packard HP is one of the information technology IT companies, founded in 1939 1. Headquartered in Palo Alto, California, USA. Hewlett-Packard has three business groups: Information Products Group, Printing and Imaging Systems Group and Enterprise Computer Professional Services Group. An...

Unauthorized Access Vulnerability in HP Color LaserJet MFP M277n

HP-Color-LaserJet-MFP-M277n is a printer from HP Trading Shanghai Co. An unauthorized access vulnerability exists in the HP Color LaserJet MFP M277n, which can be exploited by attackers to obtain sensitive information...

HP PageWide Pro 477dw MFP has an unauthorized access vulnerability

Hewlett-Packard Trading Shanghai Co., Ltd. is a company whose business scope includes computer hardware and software equipment, printing equipment, imaging equipment, communication equipment and so on. An unauthorized access vulnerability exists in HP PageWide Pro 477dw MFP, which can be exploite...

HPSBPI03688 rev. 1 - Certain HP Printer and MFP products - Cross-Site Scripting (XSS)

Potential Security Impact Cross-site Scripting XSS Source: HP, HP Product Security Response Team PSRT Reported by: The jQuery Foundation VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP printers and MFPs. In jQuery versions before 3.5.0, passing HTML fro...