ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2022-29588

—
CVSS 3.1
7.5 high
EPSS
2%p76
Published
()
Modified
Description

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.

Vendors
konicaminolta
Products
bizhub 226i firmware, bizhub 227 firmware, bizhub 246i firmware, bizhub 287 firmware, bizhub 306i firmware, bizhub 308 firmware, bizhub 308e firmware, bizhub 367 firmware, bizhub 368 firmware, bizhub 368e firmware, bizhub 4052 firmware, bizhub 458 firmware
Weakness
CWE-522
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news

No ingested article mentions this CVE yet.