Strix
26.1K

CVE-2022-29586

HIGHCVSS 7.4/10EPSS 0.43%

Last modified

CVE-2022-29586 is a high-severity vulnerability rated 7.4/10 on the CVSS scale. Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode.. EPSS estimates a 0.43% chance of exploitation in the next 30 days.

Description

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode.

Metrics

CVSS 3.1
7.4/10

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS Probability
0.43%

34.3th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
KonicaminoltaBizhub 226i Firmware< 2022-04-14
KonicaminoltaBizhub 227 Firmware< 2022-04-14
KonicaminoltaBizhub 246i Firmware< 2022-04-14
KonicaminoltaBizhub 287 Firmware< 2022-04-14
KonicaminoltaBizhub 306i Firmware< 2022-04-14
KonicaminoltaBizhub 308 Firmware< 2022-04-14
KonicaminoltaBizhub 308e Firmware< 2022-04-14
KonicaminoltaBizhub 367 Firmware< 2022-04-14
KonicaminoltaBizhub 368 Firmware< 2022-04-14
KonicaminoltaBizhub 368e Firmware< 2022-04-14
KonicaminoltaBizhub 4052 Firmware< 2022-04-14
KonicaminoltaBizhub 458 Firmware< 2022-04-14
KonicaminoltaBizhub 458e Firmware< 2022-04-14
KonicaminoltaBizhub 4752 Firmware< 2022-04-14
KonicaminoltaBizhub 558 Firmware< 2022-04-14
KonicaminoltaBizhub 558e Firmware< 2022-04-14
KonicaminoltaBizhub 658e Firmware< 2022-04-14
KonicaminoltaBizhub 758 Firmware< 2022-04-14
KonicaminoltaBizhub 808 Firmware< 2022-04-14
KonicaminoltaBizhub 958 Firmware< 2022-04-14
KonicaminoltaBizhub C227 Firmware< 2022-04-14
KonicaminoltaBizhub C250i Firmware< 2022-04-14
KonicaminoltaBizhub C258 Firmware< 2022-04-14
KonicaminoltaBizhub C287 Firmware< 2022-04-14
KonicaminoltaBizhub C300i Firmware< 2022-04-14
KonicaminoltaBizhub C308 Firmware< 2022-04-14
KonicaminoltaBizhub C3300i Firmware< 2022-04-14
KonicaminoltaBizhub C3320i Firmware< 2022-04-14
KonicaminoltaBizhub C3350i Firmware< 2022-04-14
KonicaminoltaBizhub C3351 Firmware< 2022-04-14
KonicaminoltaBizhub C360i Firmware< 2022-04-14
KonicaminoltaBizhub C368 Firmware< 2022-04-14
KonicaminoltaBizhub C3851 Firmware< 2022-04-14
KonicaminoltaBizhub C3851fs Firmware< 2022-04-14
KonicaminoltaBizhub C4000i Firmware< 2022-04-14
KonicaminoltaBizhub C4050i Firmware< 2022-04-14
KonicaminoltaBizhub C450i Firmware< 2022-04-14
KonicaminoltaBizhub C458 Firmware< 2022-04-14
KonicaminoltaBizhub C550i Firmware< 2022-04-14
KonicaminoltaBizhub C558 Firmware< 2022-04-14
KonicaminoltaBizhub C650i Firmware< 2022-04-14
KonicaminoltaBizhub C658 Firmware< 2022-04-14
KonicaminoltaBizhub C659 Firmware< 2022-04-14
KonicaminoltaBizhub C759 Firmware< 2022-04-14
KonicaminoltaBizhub Pro958 Firmware< 2022-04-14

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2022-29586?
Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode.
How severe is CVE-2022-29586?
CVE-2022-29586 has a CVSS score of 7.4/10 (HIGH severity). The EPSS model estimates a 0.43% probability of exploitation in the next 30 days.
How do I fix CVE-2022-29586?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-29586?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST