← Back

Bizhub 367 Firmware

bizhub_367_firmware

Vendor: Konicaminolta • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-29588
1Konicaminolta
45Bizhub 226i Firmware
Bizhub 227 FirmwareBizhub 246i Firmware+42 more
Nov 21, 2024
May 16, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.
CVE-2022-29587
1Konicaminolta
45Bizhub 226i Firmware
Bizhub 227 FirmwareBizhub 246i Firmware+42 more
Nov 21, 2024
May 16, 2022
N/A· v4
4.0 MEDIUM· v3
4.7 MEDIUM· v2
Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges.
CVE-2022-29586
1Konicaminolta
45Bizhub 226i Firmware
Bizhub 227 FirmwareBizhub 246i Firmware+42 more
Nov 21, 2024
May 16, 2022
N/A· v4
7.4 HIGH· v3
6.9 MEDIUM· v2
Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode.