Detections
Analytics

Konica Bizhub Multifunction Printers Insufficiently Protected Credentials (CVE-2022-29588)

high Tenable OT Security Plugin ID 505924

Synopsis

The remote OT asset is affected by a vulnerability.

Description

Konica Minolta bizhub MFP devices before 2022-04-14 use cleartext password storage for the /var/log/nginx/html/ADMINPASS and /etc/shadow files.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Solution

Refer to the vendor advisory.

See Also

https://sec-consult.com/vulnerability-lab/

http://www.nessus.org/u?b95b550c

Plugin Details

Severity: High

ID: 505924

File Name: tenable_ot_konica_CVE-2022-29588.nasl

Version: 1.1

Type: Remote

Family: Tenable.ot

Published: 8/3/2026

Updated: 8/3/2026

Supported Sensors: Tenable OT Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS Score Source: CVE-2022-29588

CVSS v3

Risk Factor: High

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vulnerability Information

CPE: cpe:/o:konicaminolta:bizhub_226i_firmware, cpe:/o:konicaminolta:bizhub_246i_firmware, cpe:/o:konicaminolta:bizhub_266i_firmware, cpe:/o:konicaminolta:bizhub_306i_firmware, cpe:/o:konicaminolta:bizhub_c250i_firmware, cpe:/o:konicaminolta:bizhub_c300i_firmware, cpe:/o:konicaminolta:bizhub_c3300i_firmware, cpe:/o:konicaminolta:bizhub_c3320i_firmware, cpe:/o:konicaminolta:bizhub_c3350i_firmware, cpe:/o:konicaminolta:bizhub_c360i_firmware, cpe:/o:konicaminolta:bizhub_c4000i_firmware, cpe:/o:konicaminolta:bizhub_c4050i_firmware

Required KB Items: Tenable.ot/Konica

Patch Publication Date: 5/16/2022

Vulnerability Publication Date: 5/16/2022

Reference Information

CVE: CVE-2022-29588

CWE: 522