Konicaminolta Bizhub Pro958 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Konicaminolta Bizhub Pro958 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-29588 — CVSS 7.5 (high): Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow…
• CVE-2022-29586 — CVSS 7.4 (high): Konica Minolta bizhub MFP devices before 2022-04-14 allow a Sandbox Escape. An attacker must attach a keyboard to a USB port, press F12…
• CVE-2022-29587 — CVSS 4.0 (medium): Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access…