Strix
26.1K

CVE-2022-29588

HIGHCVSS 7.5/10EPSS 1.63%

Last modified

CVE-2022-29588 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.. EPSS estimates a 1.63% chance of exploitation in the next 30 days.

Description

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
1.63%

73.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
KonicaminoltaBizhub 226i Firmware< 2022-04-14
KonicaminoltaBizhub 227 Firmware< 2022-04-14
KonicaminoltaBizhub 246i Firmware< 2022-04-14
KonicaminoltaBizhub 287 Firmware< 2022-04-14
KonicaminoltaBizhub 306i Firmware< 2022-04-14
KonicaminoltaBizhub 308 Firmware< 2022-04-14
KonicaminoltaBizhub 308e Firmware< 2022-04-14
KonicaminoltaBizhub 367 Firmware< 2022-04-14
KonicaminoltaBizhub 368 Firmware< 2022-04-14
KonicaminoltaBizhub 368e Firmware< 2022-04-14
KonicaminoltaBizhub 4052 Firmware< 2022-04-14
KonicaminoltaBizhub 458 Firmware< 2022-04-14
KonicaminoltaBizhub 458e Firmware< 2022-04-14
KonicaminoltaBizhub 4752 Firmware< 2022-04-14
KonicaminoltaBizhub 558 Firmware< 2022-04-14
KonicaminoltaBizhub 558e Firmware< 2022-04-14
KonicaminoltaBizhub 658e Firmware< 2022-04-14
KonicaminoltaBizhub 758 Firmware< 2022-04-14
KonicaminoltaBizhub 808 Firmware< 2022-04-14
KonicaminoltaBizhub 958 Firmware< 2022-04-14
KonicaminoltaBizhub C227 Firmware< 2022-04-14
KonicaminoltaBizhub C250i Firmware< 2022-04-14
KonicaminoltaBizhub C258 Firmware< 2022-04-14
KonicaminoltaBizhub C287 Firmware< 2022-04-14
KonicaminoltaBizhub C300i Firmware< 2022-04-14
KonicaminoltaBizhub C308 Firmware< 2022-04-14
KonicaminoltaBizhub C3300i Firmware< 2022-04-14
KonicaminoltaBizhub C3320i Firmware< 2022-04-14
KonicaminoltaBizhub C3350i Firmware< 2022-04-14
KonicaminoltaBizhub C3351 Firmware< 2022-04-14
KonicaminoltaBizhub C360i Firmware< 2022-04-14
KonicaminoltaBizhub C368 Firmware< 2022-04-14
KonicaminoltaBizhub C3851 Firmware< 2022-04-14
KonicaminoltaBizhub C3851fs Firmware< 2022-04-14
KonicaminoltaBizhub C4000i Firmware< 2022-04-14
KonicaminoltaBizhub C4050i Firmware< 2022-04-14
KonicaminoltaBizhub C450i Firmware< 2022-04-14
KonicaminoltaBizhub C458 Firmware< 2022-04-14
KonicaminoltaBizhub C550i Firmware< 2022-04-14
KonicaminoltaBizhub C558 Firmware< 2022-04-14
KonicaminoltaBizhub C650i Firmware< 2022-04-14
KonicaminoltaBizhub C658 Firmware< 2022-04-14
KonicaminoltaBizhub C659 Firmware< 2022-04-14
KonicaminoltaBizhub C759 Firmware< 2022-04-14
KonicaminoltaBizhub Pro958 Firmware< 2022-04-14

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2022-29588?
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.
How severe is CVE-2022-29588?
CVE-2022-29588 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 1.63% probability of exploitation in the next 30 days.
How do I fix CVE-2022-29588?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-29588?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST