Threat Investigation
Request a demo

CVE-2022-29586

High

Description

Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode.

SeverityHigh
CVSS7.4
Exploit probability—
ProductKonicaminolta Bizhub 226i Firmware
PublishedMay 16, 2022
First seenMay 16, 2022

How to fix

Update
  • konicaminolta bizhub_226i_firmware2022-04-14 or later
  • konicaminolta bizhub_227_firmware2022-04-14 or later
  • konicaminolta bizhub_246i_firmware2022-04-14 or later
  • konicaminolta bizhub_287_firmware2022-04-14 or later
  • konicaminolta bizhub_306i_firmware2022-04-14 or later
  • konicaminolta bizhub_308_firmware2022-04-14 or later
  • konicaminolta bizhub_308e_firmware2022-04-14 or later
  • konicaminolta bizhub_367_firmware2022-04-14 or later
  • konicaminolta bizhub_368_firmware2022-04-14 or later
  • konicaminolta bizhub_368e_firmware2022-04-14 or later
  • konicaminolta bizhub_4052_firmware2022-04-14 or later
  • konicaminolta bizhub_458_firmware2022-04-14 or later

Affected products

ProductAffected versionsFixed in
konicaminolta bizhub_226i_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_227_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_246i_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_287_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_306i_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_308_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_308e_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_367_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_368_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_368e_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_4052_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_458_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_458e_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_4752_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_558_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_558e_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_658e_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_758_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_808_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_958_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c227_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c250i_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c258_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c287_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c300i_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c308_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c3300i_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c3320i_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c3350i_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c3351_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c360i_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c368_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c3851_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c3851fs_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c4000i_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c4050i_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c450i_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c458_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c550i_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c558_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c650i_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c658_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c659_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_c759_firmwarev < 2022-04-142022-04-14
konicaminolta bizhub_pro958_firmwarev < 2022-04-142022-04-14

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.