Konicaminolta Bizhub C360i Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Konicaminolta Bizhub C360i Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2022-29588 — CVSS 7.5 (high): Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow…
• CVE-2022-29586 — CVSS 7.4 (high): Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12…
• CVE-2021-20871 — CVSS 6.5 (medium): Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier…
• CVE-2021-20869 — CVSS 6.5 (medium): Exposure of sensitive information to an unauthorized actor vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier…
• CVE-2021-20870 — CVSS 4.6 (medium): Improper handling of exceptional conditions vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub…
• CVE-2021-20868 — CVSS 4.5 (medium): Incorrect authorization vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and…
• CVE-2022-29587 — CVSS 4.0 (medium): Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access…