Konica Minolta, Inc.
17 CVEs across 10 Konica Minolta, Inc. products. Browse Konica Minolta, Inc. vulnerabilities, severities, and proof-of-concept exploits.
Konica Minolta, Inc. products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-55704 | Medium | 5.3 | 2026-01-29 | Hidden functionality issue exists in multiple MFPs provided by Brother Industries, Ltd., which may allow an attacker to obtain the logs of the affected product… |
CVE-2025-53869 | Low | 3.7 | 2026-01-29 | Multiple MFPs provided by Brother Industries, Ltd. does not properly validate server certificates, which may allow a man-in-the-middle attacker to replace the… |
CVE-2025-54777 | Medium | 4.3 | 2025-08-29 | Uncaught exception issue exists in Multiple products in bizhub series. If a malformed file is imported as an S/MIME Email certificate, it may cause a denial-of… |
CVE-2025-8452 | Medium | 4.3 | 2025-08-12 | By using the "uscan" protocol provided by the eSCL specification, an attacker can discover the serial number of multi-function printers that implement the Brot… |
CVE-2024-51984 | Medium | 6.8 | 2025-06-25 | An authenticated attacker can reconfigure the target device to use an external service (such as LDAP or FTP) controlled by the attacker. If an existing passwor… |
CVE-2024-51983 | High | 7.5 | 2025-06-25 | An unauthenticated attacker who can connect to the Web Services feature (HTTP TCP port 80) can issue a WS-Scan SOAP request containing an unexpected JobToken v… |
CVE-2024-51981 | Medium | 5.3 | 2025-06-25 | An unauthenticated attacker may perform a blind server side request forgery (SSRF), due to a CLRF injection issue that can be leveraged to perform HTTP request… |
CVE-2024-51980 | Medium | 5.3 | 2025-06-25 | An unauthenticated attacker may perform a limited server side request forgery (SSRF), forcing the target device to open a TCP connection to an arbitrary port n… |
CVE-2024-51979 | High | 7.2 | 2025-06-25 | An authenticated attacker may trigger a stack based buffer overflow by performing a malformed request to either the HTTP service (TCP port 80), the HTTPS servi… |
CVE-2024-51978 | Critical | 9.8 | 2025-06-25 | An unauthenticated attacker who knows the target device's serial number, can generate the default administrator password for the device. An unauthenticated att… |
CVE-2024-51977 | Medium | 5.3 | 2025-06-25 | An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak… |
CVE-2024-47939 | High | 7.7 | 2024-11-01 | Stack-based buffer overflow vulnerability exists in multiple laser printers and MFPs which implement Ricoh Web Image Monitor. If this vulnerability is exploite… |
CVE-2021-20872 | Medium | 6.8 | 2022-01-04 | Protection mechanism failure vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhu… |
CVE-2021-20871 | Medium | 6.5 | 2022-01-04 | Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C… |
CVE-2021-20870 | Medium | 4.6 | 2022-01-04 | Improper handling of exceptional conditions vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and… |
CVE-2021-20869 | Medium | 6.5 | 2022-01-04 | Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C… |
CVE-2021-20868 | Medium | 4.5 | 2022-01-04 | Incorrect authorization vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C36… |