CVE-2025-6081
Last modified
CVE-2025-6081 is a medium-severity vulnerability rated 6.8/10 on the CVSS scale. Insufficiently Protected Credentials in LDAP in Konica Minolta bizhub 227 Multifunction printers version GCQ-Y3 or earlier allows an attacker can reconfigure the target device to use an external LDAP service controlled by the attacker. If an LDAP password is set on the target device, the attacker can force the target device to authenticate to the attacker controlled LDAP service. EPSS estimates a 0.28% chance of exploitation in the next 30 days.
Description
Insufficiently Protected Credentials in LDAP in Konica Minolta bizhub 227 Multifunction printers version GCQ-Y3 or earlier allows an attacker can reconfigure the target device to use an external LDAP service controlled by the attacker. If an LDAP password is set on the target device, the attacker can force the target device to authenticate to the attacker controlled LDAP service. This will allow the attacker to capture the plaintext password of the configured LDAP service.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-6081?
How severe is CVE-2025-6081?
How do I fix CVE-2025-6081?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-60799phpPgAdmin 7.13.0 and earlier contains an incorrect access c…6.1
- CVE-2025-6080The WPGYM - Wordpress Gym Management System plugin for WordP…8.8
- CVE-2025-60800Incorrect access control in the /jshERP-boot/user/info inter…7.5
- CVE-2025-60801jshERP up to commit fbda24da was discovered to contain an un…8.2
- CVE-2025-60803Antabot White-Jotter up to commit 9bcadc was discovered to c…9.8
- CVE-2025-60805An issue was discovered in BESSystem BES Application Server …7.5
- CVE-2025-6082The Birth Chart Compatibility plugin for WordPress is vulner…5.3
- CVE-2025-60828WukongCRM-9.0-JAVA was discovered to contain a fastjson dese…6.5
- CVE-2025-6083In ExtremeCloud Universal ZTNA, a syntax error in the 'searc…4.3
- CVE-2025-60830redragon-erp v1.0 was discovered to contain a Shiro deserial…6.5
- CVE-2025-60833An XML External Entity (XXE) vulnerability in the /mall/wxpa…6.5
- CVE-2025-60834A fastjson deserialization vulnerability in uzy-ssm-mall v1.…6.5
Are you affected by CVE-2025-6081?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST