Bizhub C368 Firmware

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-29588 May 16, 06:15 HIGH This Week

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Nginx Bizhub C650I Firmware Bizhub C550I Firmware Bizhub C450I Firmware +43

NVD

CVSS 3.1

7.5

EPSS

1.7%

CVE-2022-29587 May 16, 06:15 MEDIUM POC This Month

Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges. Rated medium severity (CVSS 4.0). Public exploit code available and no vendor patch available.

Privilege Escalation Google Bizhub C650I Firmware Bizhub C550I Firmware Bizhub C450I Firmware +43

NVD

CVSS 3.1

4.0

EPSS

0.4%

CVE-2022-29586 May 16, 06:15 HIGH This Week

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. Rated high severity (CVSS 7.4), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Bizhub C650I Firmware Bizhub C550I Firmware Bizhub C450I Firmware Bizhub C360I Firmware +42

NVD

CVSS 3.1

7.4

EPSS

0.4%

CVE-2022-29588

EPSS 2% CVSS 7.5

HIGH This Week

Information Disclosure Nginx Bizhub C650I Firmware +45

NVD

CVE-2022-29587

EPSS 0% CVSS 4.0

MEDIUM POC This Month

Privilege Escalation Google Bizhub C650I Firmware +45

NVD

CVE-2022-29586

EPSS 0% CVSS 7.4

HIGH This Week

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. Rated high severity (CVSS 7.4), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Bizhub C650I Firmware Bizhub C550I Firmware +44

NVD