CVE-2022-29587
MEDIUMKonica Minolta bizhub MFP Firmware < 2022-04-14 - Improper Privilege Management via Internal Chromium Browser
Title source: llmDescription
Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_misc
https://sec-consult.com/vulnerability-lab/
Exploit, Third Party Advisory x_refsource_misc
https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/
Scores
CVSS v3
4.0
EPSS
0.0039
EPSS Percentile
30.9%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-269
Status
published
Products (45)
konicaminolta/bizhub_226i_firmware
< 2022-04-14
konicaminolta/bizhub_227_firmware
< 2022-04-14
konicaminolta/bizhub_246i_firmware
< 2022-04-14
konicaminolta/bizhub_287_firmware
< 2022-04-14
konicaminolta/bizhub_306i_firmware
< 2022-04-14
konicaminolta/bizhub_308_firmware
< 2022-04-14
konicaminolta/bizhub_308e_firmware
< 2022-04-14
konicaminolta/bizhub_367_firmware
< 2022-04-14
konicaminolta/bizhub_368_firmware
< 2022-04-14
konicaminolta/bizhub_368e_firmware
< 2022-04-14
... and 35 more
Published
May 16, 2022
Tracked Since
Feb 18, 2026