Konicaminolta Bizhub 246i Firmware
7 CVEs affecting Konicaminolta Bizhub 246i Firmware. Latest disclosed: 2022-05-16. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29588 | High | 7.5 | 2022-05-16 | Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files. |
CVE-2022-29586 | High | 7.4 | 2022-05-16 | Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from t… |
CVE-2021-20871 | Medium | 6.5 | 2022-01-04 | Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C… |
CVE-2021-20869 | Medium | 6.5 | 2022-01-04 | Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C… |
CVE-2021-20870 | Medium | 4.6 | 2022-01-04 | Improper handling of exceptional conditions vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and… |
CVE-2021-20868 | Medium | 4.5 | 2022-01-04 | Incorrect authorization vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C36… |
CVE-2022-29587 | Medium | 4.0 | 2022-05-16 | Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges. |