CVE-2022-29588
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var...
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.
- Record
CVE-2022-29588- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-522
- Updated
- 2026-11-02
CVE List No score
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.
- Record
CVE-2022-29588- Updated
- 2026-11-02
EUVDEUVD-2022-33920 No score
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.
- Record
EUVD-2022-33920- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g6vp-23xc-rxrv
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var...
Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.
- Record
GHSA-g6vp-23xc-rxrv- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-522
- Updated
- 2026-11-02
Affected products
- konicaminolta bizhub 226i firmware
- konicaminolta bizhub 227 firmware
- konicaminolta bizhub 246i firmware
- konicaminolta bizhub 287 firmware
- konicaminolta bizhub 306i firmware
- konicaminolta bizhub 308 firmware
- konicaminolta bizhub 308e firmware
- konicaminolta bizhub 367 firmware
- konicaminolta bizhub 368 firmware
- konicaminolta bizhub 368e firmware
- konicaminolta bizhub 4052 firmware
- konicaminolta bizhub 458 firmware
Show 33 moreShow less
- konicaminolta bizhub 458e firmware
- konicaminolta bizhub 4752 firmware
- konicaminolta bizhub 558 firmware
- konicaminolta bizhub 558e firmware
- konicaminolta bizhub 658e firmware
- konicaminolta bizhub 758 firmware
- konicaminolta bizhub 808 firmware
- konicaminolta bizhub 958 firmware
- konicaminolta bizhub c227 firmware
- konicaminolta bizhub c250i firmware
- konicaminolta bizhub c258 firmware
- konicaminolta bizhub c287 firmware
- konicaminolta bizhub c300i firmware
- konicaminolta bizhub c308 firmware
- konicaminolta bizhub c3300i firmware
- konicaminolta bizhub c3320i firmware
- konicaminolta bizhub c3350i firmware
- konicaminolta bizhub c3351 firmware
- konicaminolta bizhub c360i firmware
- konicaminolta bizhub c368 firmware
- konicaminolta bizhub c3851 firmware
- konicaminolta bizhub c3851fs firmware
- konicaminolta bizhub c4000i firmware
- konicaminolta bizhub c4050i firmware
- konicaminolta bizhub c450i firmware
- konicaminolta bizhub c458 firmware
- konicaminolta bizhub c550i firmware
- konicaminolta bizhub c558 firmware
- konicaminolta bizhub c650i firmware
- konicaminolta bizhub c658 firmware
- konicaminolta bizhub c659 firmware
- konicaminolta bizhub c759 firmware
- konicaminolta bizhub pro958 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-29588 is a high vulnerability (CVSS 7.5) in Konicaminolta Bizhub 226i Firmware, published May 16, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.75%, the 78th percentile. No source names a fixed version.