CVE-2022-29587: Medium severity konicaminolta bizhub 226i firmware vulnerability
Published May 16, 2022
·Updated
Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges.
Affected Software
90 affected components
Konicaminolta Bizhub 226i Firmware<2022-04-14
Konicaminolta Bizhub 226i
Konicaminolta Bizhub 227 Firmware<2022-04-14
Konicaminolta Bizhub 227
Konicaminolta Bizhub 246i Firmware<2022-04-14
Konicaminolta Bizhub 246i
Konicaminolta Bizhub 287 Firmware<2022-04-14
Konicaminolta Bizhub 287
Konicaminolta Bizhub 306i Firmware<2022-04-14
Konicaminolta Bizhub 306i
Konicaminolta Bizhub 308 Firmware<2022-04-14
Konicaminolta Bizhub 308
Konicaminolta Bizhub 308e Firmware<2022-04-14
Konicaminolta Bizhub 308e
Konicaminolta Bizhub 367 Firmware<2022-04-14
Konicaminolta Bizhub 367
Konicaminolta Bizhub 368 Firmware<2022-04-14
Konicaminolta Bizhub 368
Konicaminolta Bizhub 368e Firmware<2022-04-14
Konicaminolta Bizhub 368e
Konicaminolta Bizhub 4052 Firmware<2022-04-14
Konicaminolta Bizhub 4052
Konicaminolta Bizhub 458 Firmware<2022-04-14
Konicaminolta Bizhub 458
Konicaminolta Bizhub 458e Firmware<2022-04-14
Konicaminolta Bizhub 458e
Konicaminolta Bizhub 4752 Firmware<2022-04-14
Konicaminolta Bizhub 4752
Konicaminolta Bizhub 558 Firmware<2022-04-14
Konicaminolta Bizhub 558
Konicaminolta Bizhub 558e Firmware<2022-04-14
Konicaminolta Bizhub 558e
Konicaminolta Bizhub 658e Firmware<2022-04-14
Konicaminolta Bizhub 658e
Konicaminolta Bizhub 758 Firmware<2022-04-14
Konicaminolta Bizhub 758
Konicaminolta Bizhub 808 Firmware<2022-04-14
Konicaminolta Bizhub 808
Konicaminolta Bizhub 958 Firmware<2022-04-14
Konicaminolta Bizhub 958
Konicaminolta Bizhub C227 Firmware<2022-04-14
Konicaminolta Bizhub C227
Konicaminolta Bizhub C250i Firmware<2022-04-14
Konicaminolta Bizhub C250i
Konicaminolta Bizhub C258 Firmware<2022-04-14
Konicaminolta Bizhub C258
Konicaminolta Bizhub C287 Firmware<2022-04-14
Konicaminolta Bizhub C287
Konicaminolta Bizhub C300i Firmware<2022-04-14
Konicaminolta Bizhub C300i
Konicaminolta Bizhub C308 Firmware<2022-04-14
Konicaminolta Bizhub C308
Konicaminolta Bizhub C3300i Firmware<2022-04-14
Konicaminolta Bizhub C3300i
Konicaminolta Bizhub C3320i Firmware<2022-04-14
Konicaminolta Bizhub C3320i
Konicaminolta Bizhub C3350i Firmware<2022-04-14
Konicaminolta Bizhub C3350i
Konicaminolta Bizhub C3351 Firmware<2022-04-14
Konicaminolta Bizhub C3351
Konicaminolta Bizhub C360i Firmware<2022-04-14
Konicaminolta Bizhub C360i
Konicaminolta Bizhub C368 Firmware<2022-04-14
Konicaminolta Bizhub C368
Konicaminolta Bizhub C3851 Firmware<2022-04-14
Konicaminolta Bizhub C3851
Konicaminolta Bizhub C3851fs Firmware<2022-04-14
Konicaminolta Bizhub C3851fs
Konicaminolta Bizhub C4000i Firmware<2022-04-14
Konicaminolta Bizhub C4000i
Konicaminolta Bizhub C4050i Firmware<2022-04-14
Konicaminolta Bizhub C4050i
Konicaminolta Bizhub C450i Firmware<2022-04-14
Konicaminolta Bizhub C450i
Konicaminolta Bizhub C458 Firmware<2022-04-14
Konicaminolta Bizhub C458
Konicaminolta Bizhub C550i Firmware<2022-04-14
Konicaminolta Bizhub C550i
Konicaminolta Bizhub C558 Firmware<2022-04-14
Konicaminolta Bizhub C558
Konicaminolta Bizhub C650i Firmware<2022-04-14
Konicaminolta Bizhub C650i
Konicaminolta Bizhub C658 Firmware<2022-04-14
Konicaminolta Bizhub C658
Konicaminolta Bizhub C659 Firmware<2022-04-14
Konicaminolta Bizhub C659
Konicaminolta Bizhub C759 Firmware<2022-04-14
Konicaminolta Bizhub C759
Konicaminolta Bizhub Pro958 Firmware<2022-04-14
Konicaminolta Bizhub Pro958
Event History
May 16, 2022
CVE Published
via MITRE·05:32 AM
Data Sourced
via MITRE·05:32 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-29587?
CVE-2022-29587 is considered a high-severity vulnerability due to the risk associated with the internal Chromium browser executing with root privileges.
2
How do I fix CVE-2022-29587?
To fix CVE-2022-29587, update the Konica Minolta Bizhub MFP devices to firmware versions released on or after April 14, 2022.
3
What are the affected devices for CVE-2022-29587?
CVE-2022-29587 affects several Konica Minolta Bizhub models, specifically those with firmware versions before April 14, 2022.
4
What is the impact of CVE-2022-29587?
The impact of CVE-2022-29587 includes potential unauthorized access and control over the affected devices, which can lead to data breaches.
5
Are there any known exploits for CVE-2022-29587?
While there are no public exploits reported for CVE-2022-29587, the vulnerability poses risks that could be exploited by malicious actors.