EUVD-2025-17472Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Low-privilege access required (PR:L), user interaction to view crafted data (UI:R), integrity impact limited to script injection.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability, which was classified as problematic, was found in Konica Minolta bizhub up to 20250202. This affects an unknown part of the component Display MFP Information List. The manipulation of the argument Model Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
AnalysisAI
Cross-site scripting (XSS) vulnerability in Konica Minolta bizhub multifunction printers (firmware up to 20250202) allows remote attackers with low-privilege access to inject arbitrary web scripts via the Model Name parameter in the Display MFP Information List component. When an administrative user views the crafted page, the injected script executes in their browser, potentially leading to session hijacking or credential theft. Publicly available exploit code exists, though no active exploitation in the wild has been confirmed.
Technical ContextAI
The affected component is the web-based management interface of Konica Minolta bizhub printers. The vulnerability arises from insufficient sanitization of user-supplied input in the "Model Name" field before it is displayed in the "Display MFP Information List" view, resulting in a stored cross-site scripting condition (CWE-79). The vulnerable software is identified by CPE cpe:2.3:a:konicaminolta:bizhub:*:*:*:*:*:*:*:*, covering all firmware versions up to and including 20250202. The HTTP-based attack leverages typical web scripting techniques, and the impact is limited to the integrity of rendered pages in the victim's browser.
RemediationAI
No vendor-released patch has been identified at the time of analysis. As a workaround, restrict access to the printer's web management interface to trusted administrators only, disable remote management if not required, and consider removing the ability for low-privilege users to modify the Model Name field. Applying network-level access controls can reduce the attack surface, but it does not eliminate the risk internally. Monitor the vendor's support site for an official fix.
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today