7.4
HIGH
CVE-2022-29586
Konica Minolta bizhub MFP Sandbox Escape
Description

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode.

INFO

Published Date :

May 16, 2022, 6:15 a.m.

Last Modified :

Oct. 11, 2022, 8:01 p.m.

Remotely Exploitable :

No

Impact Score :

6.0

Exploitability Score :

0.7
Affected Products

The following products are affected by CVE-2022-29586 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Konicaminolta bizhub_c650i_firmware
2 Konicaminolta bizhub_c550i_firmware
3 Konicaminolta bizhub_c450i_firmware
4 Konicaminolta bizhub_c360i_firmware
5 Konicaminolta bizhub_c300i_firmware
6 Konicaminolta bizhub_c250i_firmware
7 Konicaminolta bizhub_306i_firmware
8 Konicaminolta bizhub_226i_firmware
9 Konicaminolta bizhub_c759_firmware
10 Konicaminolta bizhub_c659_firmware
11 Konicaminolta bizhub_c658_firmware
12 Konicaminolta bizhub_c558_firmware
13 Konicaminolta bizhub_c458_firmware
14 Konicaminolta bizhub_958_firmware
15 Konicaminolta bizhub_808_firmware
16 Konicaminolta bizhub_758_firmware
17 Konicaminolta bizhub_658e_firmware
18 Konicaminolta bizhub_558e_firmware
19 Konicaminolta bizhub_458e_firmware
20 Konicaminolta bizhub_c287_firmware
21 Konicaminolta bizhub_c227_firmware
22 Konicaminolta bizhub_287_firmware
23 Konicaminolta bizhub_227_firmware
24 Konicaminolta bizhub_368e_firmware
25 Konicaminolta bizhub_308e_firmware
26 Konicaminolta bizhub_c368_firmware
27 Konicaminolta bizhub_c308_firmware
28 Konicaminolta bizhub_c258_firmware
29 Konicaminolta bizhub_558_firmware
30 Konicaminolta bizhub_458_firmware
31 Konicaminolta bizhub_368_firmware
32 Konicaminolta bizhub_308_firmware
33 Konicaminolta bizhub_c4050i_firmware
34 Konicaminolta bizhub_c3350i_firmware
35 Konicaminolta bizhub_c4000i_firmware
36 Konicaminolta bizhub_c3300i_firmware
37 Konicaminolta bizhub_c3320i_firmware
38 Konicaminolta bizhub_c3851fs_firmware
39 Konicaminolta bizhub_c3851_firmware
40 Konicaminolta bizhub_c3351_firmware
41 Konicaminolta bizhub_4752_firmware
42 Konicaminolta bizhub_4052_firmware
43 Konicaminolta bizhub_246i_firmware
44 Konicaminolta bizhub_367_firmware
45 Konicaminolta bizhub_pro958_firmware
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2022-29586.

URL Resource
https://sec-consult.com/vulnerability-lab/ Third Party Advisory
https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/ Third Party Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2022-29586 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2022-29586 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • Reanalysis by [email protected]

    Oct. 11, 2022

    Action Type Old Value New Value
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_226i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_226i:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_227_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_227:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_246i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_246i:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_287_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_287:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_306i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_306i:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_308_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_308:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_308e_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_308e:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_367_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_367:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_368_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_368:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_368e_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_368e:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_4052_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_4052:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_458_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_458:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_458e_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_458e:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_4752_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_4752:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_558_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_558:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_558e_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_558e:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_658e_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_658e:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_758_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_758:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_808_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_808:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_958_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_958:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c227_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c227:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c250i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c250i:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c258_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c258:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c287_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c287:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c300i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c300i:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c308_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c308:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3300i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c3300i:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3320i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c3320i:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3350i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c3350i:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3351_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c3351:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c360i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c360i:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c368_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c368:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3851_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c3851:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3851fs_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c3851fs:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c4000i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c4000i:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c4050i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c4050i:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c450i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c450i:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c458_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c458:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c550i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c550i:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c558_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c558:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c650i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c650i:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c658_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c658:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c659_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c659:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c759_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c759:-:*:*:*:*:*:*:*
    Removed CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_pro958_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_pro958:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_226i_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_226i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_227_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_227:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_246i_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_246i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_287_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_287:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_306i_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_306i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_308_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_308:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_308e_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_308e:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_367_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_367:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_368_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_368:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_368e_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_368e:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_4052_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_4052:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_458_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_458:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_458e_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_458e:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_4752_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_4752:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_558_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_558:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_558e_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_558e:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_658e_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_658e:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_758_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_758:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_808_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_808:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_958_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_958:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c227_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c227:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c250i_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c250i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c258_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c258:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c287_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c287:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c300i_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c300i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c308_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c308:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3300i_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c3300i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3320i_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c3320i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3350i_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c3350i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3351_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c3351:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c360i_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c360i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c368_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c368:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3851_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c3851:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3851fs_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c3851fs:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c4000i_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c4000i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c4050i_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c4050i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c450i_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c450i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c458_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c458:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c550i_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c550i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c558_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c558:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c650i_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c650i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c658_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c658:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c659_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c659:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c759_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_c759:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_pro958_firmware:*:*:*:*:*:*:*:* versions up to (excluding) 2022-04-14 OR cpe:2.3:h:konicaminolta:bizhub_pro958:-:*:*:*:*:*:*:*
  • Initial Analysis by [email protected]

    May. 26, 2022

    Action Type Old Value New Value
    Added CVSS V2 NIST (AV:L/AC:M/Au:N/C:C/I:C/A:C)
    Added CVSS V3.1 NIST AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
    Changed Reference Type https://sec-consult.com/vulnerability-lab/ No Types Assigned https://sec-consult.com/vulnerability-lab/ Third Party Advisory
    Changed Reference Type https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/ No Types Assigned https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/ Third Party Advisory
    Added CWE NIST NVD-CWE-noinfo
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_226i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_226i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_227_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_227:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_246i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_246i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_287_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_287:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_306i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_306i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_308_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_308:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_308e_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_308e:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_367_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_367:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_368_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_368:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_368e_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_368e:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_4052_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_4052:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_458_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_458:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_458e_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_458e:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_4752_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_4752:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_558_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_558:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_558e_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_558e:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_658e_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_658e:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_758_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_758:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_808_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_808:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_958_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_958:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c227_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c227:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c250i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c250i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c258_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c258:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c287_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c287:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c300i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c300i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c308_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c308:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3300i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c3300i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3320i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c3320i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3350i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c3350i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3351_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c3351:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c360i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c360i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c368_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c368:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3851_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c3851:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c3851fs_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c3851fs:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c4000i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c4000i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c4050i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c4050i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c450i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c450i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c458_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c458:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c550i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c550i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c558_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c558:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c650i_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c650i:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c658_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c658:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c659_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c659:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_c759_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_c759:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:konicaminolta:bizhub_pro958_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:konicaminolta:bizhub_pro958:-:*:*:*:*:*:*:*
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2022-29586 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2022-29586 weaknesses.

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.04 }} 0.00%

score

0.10329

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability