Konicaminolta Bizhub c3320i Firmware vulnerabilities

7 CVEs affecting Konicaminolta Bizhub c3320i Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-29588, published 2022-05-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-29588, published 2022-05-16. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.
CVE-2021-20869, published 2022-01-04. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub…
CVE-2021-20871, published 2022-01-04. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub…
CVE-2022-29586, published 2022-05-16. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12, and then escape from the kiosk mode.
CVE-2021-20868, published 2022-01-04. Medium severity, CVSS 4.5. EPSS: 0.4% chance of exploitation in the next 30 days. Incorrect authorization vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier,…
CVE-2022-29587, published 2022-05-16. Medium severity, CVSS 4.0. EPSS: 0.4% chance of exploitation in the next 30 days. Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges.
CVE-2021-20870, published 2022-01-04. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. Improper handling of exceptional conditions vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i…