CVE-2022-29586: High severity konicaminolta bizhub 226i firmware vulnerability
Published May 16, 2022
·Updated
Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode.
Affected Software
90 affected components
Konicaminolta Bizhub 226i Firmware<2022-04-14
Konicaminolta Bizhub 226i
Konicaminolta Bizhub 227 Firmware<2022-04-14
Konicaminolta Bizhub 227
Konicaminolta Bizhub 246i Firmware<2022-04-14
Konicaminolta Bizhub 246i
Konicaminolta Bizhub 287 Firmware<2022-04-14
Konicaminolta Bizhub 287
Konicaminolta Bizhub 306i Firmware<2022-04-14
Konicaminolta Bizhub 306i
Konicaminolta Bizhub 308 Firmware<2022-04-14
Konicaminolta Bizhub 308
Konicaminolta Bizhub 308e Firmware<2022-04-14
Konicaminolta Bizhub 308e
Konicaminolta Bizhub 367 Firmware<2022-04-14
Konicaminolta Bizhub 367
Konicaminolta Bizhub 368 Firmware<2022-04-14
Konicaminolta Bizhub 368
Konicaminolta Bizhub 368e Firmware<2022-04-14
Konicaminolta Bizhub 368e
Konicaminolta Bizhub 4052 Firmware<2022-04-14
Konicaminolta Bizhub 4052
Konicaminolta Bizhub 458 Firmware<2022-04-14
Konicaminolta Bizhub 458
Konicaminolta Bizhub 458e Firmware<2022-04-14
Konicaminolta Bizhub 458e
Konicaminolta Bizhub 4752 Firmware<2022-04-14
Konicaminolta Bizhub 4752
Konicaminolta Bizhub 558 Firmware<2022-04-14
Konicaminolta Bizhub 558
Konicaminolta Bizhub 558e Firmware<2022-04-14
Konicaminolta Bizhub 558e
Konicaminolta Bizhub 658e Firmware<2022-04-14
Konicaminolta Bizhub 658e
Konicaminolta Bizhub 758 Firmware<2022-04-14
Konicaminolta Bizhub 758
Konicaminolta Bizhub 808 Firmware<2022-04-14
Konicaminolta Bizhub 808
Konicaminolta Bizhub 958 Firmware<2022-04-14
Konicaminolta Bizhub 958
Konicaminolta Bizhub C227 Firmware<2022-04-14
Konicaminolta Bizhub C227
Konicaminolta Bizhub C250i Firmware<2022-04-14
Konicaminolta Bizhub C250i
Konicaminolta Bizhub C258 Firmware<2022-04-14
Konicaminolta Bizhub C258
Konicaminolta Bizhub C287 Firmware<2022-04-14
Konicaminolta Bizhub C287
Konicaminolta Bizhub C300i Firmware<2022-04-14
Konicaminolta Bizhub C300i
Konicaminolta Bizhub C308 Firmware<2022-04-14
Konicaminolta Bizhub C308
Konicaminolta Bizhub C3300i Firmware<2022-04-14
Konicaminolta Bizhub C3300i
Konicaminolta Bizhub C3320i Firmware<2022-04-14
Konicaminolta Bizhub C3320i
Konicaminolta Bizhub C3350i Firmware<2022-04-14
Konicaminolta Bizhub C3350i
Konicaminolta Bizhub C3351 Firmware<2022-04-14
Konicaminolta Bizhub C3351
Konicaminolta Bizhub C360i Firmware<2022-04-14
Konicaminolta Bizhub C360i
Konicaminolta Bizhub C368 Firmware<2022-04-14
Konicaminolta Bizhub C368
Konicaminolta Bizhub C3851 Firmware<2022-04-14
Konicaminolta Bizhub C3851
Konicaminolta Bizhub C3851fs Firmware<2022-04-14
Konicaminolta Bizhub C3851fs
Konicaminolta Bizhub C4000i Firmware<2022-04-14
Konicaminolta Bizhub C4000i
Konicaminolta Bizhub C4050i Firmware<2022-04-14
Konicaminolta Bizhub C4050i
Konicaminolta Bizhub C450i Firmware<2022-04-14
Konicaminolta Bizhub C450i
Konicaminolta Bizhub C458 Firmware<2022-04-14
Konicaminolta Bizhub C458
Konicaminolta Bizhub C550i Firmware<2022-04-14
Konicaminolta Bizhub C550i
Konicaminolta Bizhub C558 Firmware<2022-04-14
Konicaminolta Bizhub C558
Konicaminolta Bizhub C650i Firmware<2022-04-14
Konicaminolta Bizhub C650i
Konicaminolta Bizhub C658 Firmware<2022-04-14
Konicaminolta Bizhub C658
Konicaminolta Bizhub C659 Firmware<2022-04-14
Konicaminolta Bizhub C659
Konicaminolta Bizhub C759 Firmware<2022-04-14
Konicaminolta Bizhub C759
Konicaminolta Bizhub Pro958 Firmware<2022-04-14
Konicaminolta Bizhub Pro958
Event History
May 16, 2022
CVE Published
via MITRE·05:35 AM
Data Sourced
via MITRE·05:35 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-29586?
CVE-2022-29586 has been classified as a high severity vulnerability due to the potential for sandbox escape.
2
How do I fix CVE-2022-29586?
To resolve CVE-2022-29586, upgrade the affected Konica Minolta bizhub MFP devices to firmware versions released after April 14, 2022.
3
What devices are affected by CVE-2022-29586?
CVE-2022-29586 affects various Konica Minolta bizhub MFP devices with firmware versions prior to April 14, 2022.
4
What impact does CVE-2022-29586 have on my system?
CVE-2022-29586 allows attackers to escape kiosk mode, potentially leading to unauthorized access and control of the device.
5
Is it essential to address CVE-2022-29586 immediately?
Yes, it is crucial to address CVE-2022-29586 promptly to protect against security risks associated with unauthorized access.