CVE-2022-29588: High severity konicaminolta bizhub 226i firmware vulnerability
Published May 16, 2022
·Updated
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.
Affected Software
90 affected components
Konicaminolta Bizhub 226i Firmware<2022-04-14
Konicaminolta Bizhub 226i
Konicaminolta Bizhub 227 Firmware<2022-04-14
Konicaminolta Bizhub 227
Konicaminolta Bizhub 246i Firmware<2022-04-14
Konicaminolta Bizhub 246i
Konicaminolta Bizhub 287 Firmware<2022-04-14
Konicaminolta Bizhub 287
Konicaminolta Bizhub 306i Firmware<2022-04-14
Konicaminolta Bizhub 306i
Konicaminolta Bizhub 308 Firmware<2022-04-14
Konicaminolta Bizhub 308
Konicaminolta Bizhub 308e Firmware<2022-04-14
Konicaminolta Bizhub 308e
Konicaminolta Bizhub 367 Firmware<2022-04-14
Konicaminolta Bizhub 367
Konicaminolta Bizhub 368 Firmware<2022-04-14
Konicaminolta Bizhub 368
Konicaminolta Bizhub 368e Firmware<2022-04-14
Konicaminolta Bizhub 368e
Konicaminolta Bizhub 4052 Firmware<2022-04-14
Konicaminolta Bizhub 4052
Konicaminolta Bizhub 458 Firmware<2022-04-14
Konicaminolta Bizhub 458
Konicaminolta Bizhub 458e Firmware<2022-04-14
Konicaminolta Bizhub 458e
Konicaminolta Bizhub 4752 Firmware<2022-04-14
Konicaminolta Bizhub 4752
Konicaminolta Bizhub 558 Firmware<2022-04-14
Konicaminolta Bizhub 558
Konicaminolta Bizhub 558e Firmware<2022-04-14
Konicaminolta Bizhub 558e
Konicaminolta Bizhub 658e Firmware<2022-04-14
Konicaminolta Bizhub 658e
Konicaminolta Bizhub 758 Firmware<2022-04-14
Konicaminolta Bizhub 758
Konicaminolta Bizhub 808 Firmware<2022-04-14
Konicaminolta Bizhub 808
Konicaminolta Bizhub 958 Firmware<2022-04-14
Konicaminolta Bizhub 958
Konicaminolta Bizhub C227 Firmware<2022-04-14
Konicaminolta Bizhub C227
Konicaminolta Bizhub C250i Firmware<2022-04-14
Konicaminolta Bizhub C250i
Konicaminolta Bizhub C258 Firmware<2022-04-14
Konicaminolta Bizhub C258
Konicaminolta Bizhub C287 Firmware<2022-04-14
Konicaminolta Bizhub C287
Konicaminolta Bizhub C300i Firmware<2022-04-14
Konicaminolta Bizhub C300i
Konicaminolta Bizhub C308 Firmware<2022-04-14
Konicaminolta Bizhub C308
Konicaminolta Bizhub C3300i Firmware<2022-04-14
Konicaminolta Bizhub C3300i
Konicaminolta Bizhub C3320i Firmware<2022-04-14
Konicaminolta Bizhub C3320i
Konicaminolta Bizhub C3350i Firmware<2022-04-14
Konicaminolta Bizhub C3350i
Konicaminolta Bizhub C3351 Firmware<2022-04-14
Konicaminolta Bizhub C3351
Konicaminolta Bizhub C360i Firmware<2022-04-14
Konicaminolta Bizhub C360i
Konicaminolta Bizhub C368 Firmware<2022-04-14
Konicaminolta Bizhub C368
Konicaminolta Bizhub C3851 Firmware<2022-04-14
Konicaminolta Bizhub C3851
Konicaminolta Bizhub C3851fs Firmware<2022-04-14
Konicaminolta Bizhub C3851fs
Konicaminolta Bizhub C4000i Firmware<2022-04-14
Konicaminolta Bizhub C4000i
Konicaminolta Bizhub C4050i Firmware<2022-04-14
Konicaminolta Bizhub C4050i
Konicaminolta Bizhub C450i Firmware<2022-04-14
Konicaminolta Bizhub C450i
Konicaminolta Bizhub C458 Firmware<2022-04-14
Konicaminolta Bizhub C458
Konicaminolta Bizhub C550i Firmware<2022-04-14
Konicaminolta Bizhub C550i
Konicaminolta Bizhub C558 Firmware<2022-04-14
Konicaminolta Bizhub C558
Konicaminolta Bizhub C650i Firmware<2022-04-14
Konicaminolta Bizhub C650i
Konicaminolta Bizhub C658 Firmware<2022-04-14
Konicaminolta Bizhub C658
Konicaminolta Bizhub C659 Firmware<2022-04-14
Konicaminolta Bizhub C659
Konicaminolta Bizhub C759 Firmware<2022-04-14
Konicaminolta Bizhub C759
Konicaminolta Bizhub Pro958 Firmware<2022-04-14
Konicaminolta Bizhub Pro958
Event History
May 16, 2022
CVE Published
via MITRE·05:30 AM
Data Sourced
via MITRE·05:30 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-29588?
CVE-2022-29588 has been classified as a high-severity vulnerability due to its impact on password security.
2
How do I fix CVE-2022-29588?
To fix CVE-2022-29588, upgrade the Konica Minolta bizhub MFP devices to versions released on or after April 14, 2022.
3
What type of vulnerability is CVE-2022-29588?
CVE-2022-29588 is a vulnerability that involves cleartext password storage, posing a risk of unauthorized access to sensitive information.
4
Which devices are affected by CVE-2022-29588?
CVE-2022-29588 affects multiple Konica Minolta bizhub MFP devices with firmware versions prior to April 14, 2022.
5
What are the potential consequences of CVE-2022-29588?
The exploitation of CVE-2022-29588 could lead to unauthorized access to admin passwords and sensitive user information.