CVE-2022-29586
Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode.
- Score
- CVSS 3.1 7.4 High
- Status
- Modified - cve@mitre.org
- Published
- 2022-05-16
- Last modified
- 2024-08-03
Affected products
- Bizhub 226i Firmware (Konicaminolta)
- Bizhub 227 Firmware (Konicaminolta)
- Bizhub 246i Firmware (Konicaminolta)
- Bizhub 287 Firmware (Konicaminolta)
- Bizhub 306i Firmware (Konicaminolta)
- Bizhub 308 Firmware (Konicaminolta)
- Bizhub 308e Firmware (Konicaminolta)
- Bizhub 367 Firmware (Konicaminolta)
- Bizhub 368 Firmware (Konicaminolta)
- Bizhub 368e Firmware (Konicaminolta)
- Bizhub 4052 Firmware (Konicaminolta)
- Bizhub 458 Firmware (Konicaminolta)
- Bizhub 458e Firmware (Konicaminolta)
- Bizhub 4752 Firmware (Konicaminolta)
- Bizhub 558 Firmware (Konicaminolta)
- Bizhub 558e Firmware (Konicaminolta)
- Bizhub 658e Firmware (Konicaminolta)
- Bizhub 758 Firmware (Konicaminolta)
- Bizhub 808 Firmware (Konicaminolta)
- Bizhub 958 Firmware (Konicaminolta)
- Bizhub C227 Firmware (Konicaminolta)
- Bizhub C250i Firmware (Konicaminolta)
- Bizhub C258 Firmware (Konicaminolta)
- Bizhub C287 Firmware (Konicaminolta)
- Bizhub C300i Firmware (Konicaminolta)
- Bizhub C308 Firmware (Konicaminolta)
- Bizhub C3300i Firmware (Konicaminolta)
- Bizhub C3320i Firmware (Konicaminolta)
- Bizhub C3350i Firmware (Konicaminolta)
- Bizhub C3351 Firmware (Konicaminolta)
- Bizhub C360i Firmware (Konicaminolta)
- Bizhub C368 Firmware (Konicaminolta)
- Bizhub C3851 Firmware (Konicaminolta)
- Bizhub C3851fs Firmware (Konicaminolta)
- Bizhub C4000i Firmware (Konicaminolta)
- Bizhub C4050i Firmware (Konicaminolta)
- Bizhub C450i Firmware (Konicaminolta)
- Bizhub C458 Firmware (Konicaminolta)
- Bizhub C550i Firmware (Konicaminolta)
- Bizhub C558 Firmware (Konicaminolta)
- Bizhub C650i Firmware (Konicaminolta)
- Bizhub C658 Firmware (Konicaminolta)
- Bizhub C659 Firmware (Konicaminolta)
- Bizhub C759 Firmware (Konicaminolta)
- Bizhub Pro958 Firmware (Konicaminolta)
References
- https://sec-consult.com/vulnerability-lab/
- https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minol…
