CVEvulnerability
CVE-2021-20868
4.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-01-04
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.3 LOW — AV:A/AC:M/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-863
Description
Incorrect authorization vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier, bizhub 750i/650i/550i/450i G00-37 and earlier, bizhub 360i/300i G00-33 and earlier, bizhub C287i/C257i/C227i G00-19 and earlier, bizhub 306i/266i/246i/226i G00-B6 and earlier, bizhub C759/C659 GC7-X8 and earlier, bizhub C658/C558/C458 GC7-X8 and earlier, bizhub 958/808/758 GC7-X8 and earlier, bizhub 658e/558e/458e GC7-X8 and earlier, bizhub C287/C227 GC7-X8 and earlier, bizhub 287/227 GC7-X8 and earlier, bizhub 368e/308e GC7-X8 and earlier, bizhub C368/C308/C258 GC9-X4 and earlier, bizhub 558/458/368/308 GC9-X4 and earlier, bizhub C754e/C654e GDQ-M0 and earlier, bizhub 754e/654e GDQ-M0 and earlier, bizhub C554e/C454e GDQ-M1 and earlier, bizhub C364e/C284e/C224e GDQ-M1 and earlier, bizhub 554e/454e/364e/284e/224e GDQ-M1 and earlier, bizhub C754/C654 C554/C454 GR1-M0 and earlier, bizhub C364/C284/C224 GR1-M0 and earlier, bizhub 754/654 GR1-M0 and earlier, bizhub C4050i/C3350i/C4000i/C3300i G00-B6 and earlier, bizhub C3320i G00-B6 and earlier, bizhub 4750i/4050i G00-22 and earlier, bizhub 4700i G00-22 and earlier, bizhub C3851FS/C3851/C3351 GC9-X4 and earlier, and bizhub 4752/4052 GC9-X4 and earlier) allows an attacker on the adjacent network to obtain user credentials if external server authentication is enabled via a specific SOAP message sent by an administrative user.
Affected configurations
• konicaminolta bizhub c750i firmware (< g00-e9)
• konicaminolta bizhub c650i firmware (< g00-e9)
• konicaminolta bizhub c550i firmware (< g00-e9)
• konicaminolta bizhub c450i firmware (< g00-e9)
• konicaminolta bizhub c360i firmware (< g00-e9)
• konicaminolta bizhub c300i firmware (< g00-e9)
• konicaminolta bizhub c250i firmware (< g00-e9)
• konicaminolta bizhub 750i firmware (< g00-e9)
• konicaminolta bizhub 650i firmware (< g00-e9)
• konicaminolta bizhub 550i firmware (< g00-e9)
• konicaminolta bizhub 450i firmware (< g00-e9)
• konicaminolta bizhub 360i firmware (< g00-e9)
• konicaminolta bizhub 300i firmware (< g00-e9)
• konicaminolta bizhub c287i firmware (< g00-e9)
• konicaminolta bizhub c257i firmware (< g00-e9)
• konicaminolta bizhub c227i firmware (< g00-e9)
• konicaminolta bizhub 306i firmware (< g00-e9)
• konicaminolta bizhub 266i firmware (< g00-e9)
• konicaminolta bizhub 226i firmware (< g00-e9)
• konicaminolta bizhub c759 firmware (< gca-y1)
• konicaminolta bizhub c659 firmware (< gca-y1)
• konicaminolta bizhub c658 firmware (< gca-y1)
• konicaminolta bizhub c558 firmware (< gca-y1)
• konicaminolta bizhub c458 firmware (< gca-y1)
• konicaminolta bizhub 958 firmware (< gca-y1)
• konicaminolta bizhub 808 firmware (< gca-y1)
• konicaminolta bizhub 758 firmware (< gca-y1)
• konicaminolta bizhub 658e firmware (< gca-y1)
• konicaminolta bizhub 558e firmware (< gca-y1)
• konicaminolta bizhub 458e firmware (< gca-y1)
• konicaminolta bizhub c287 firmware (< gca-y0)
• konicaminolta bizhub c227 firmware (< gca-y0)
• konicaminolta bizhub 287 firmware (< gca-y0)
• konicaminolta bizhub 227 firmware (< gca-y0)
• konicaminolta bizhub 368e firmware (< gca-x8)
• konicaminolta bizhub 308e firmware (< gca-x8)
• konicaminolta bizhub c368 firmware (< gca-x4)
• konicaminolta bizhub c308 firmware (< gca-x4)
• konicaminolta bizhub c258 firmware (< gca-x4)
• konicaminolta bizhub 558 firmware (< gca-x4)
• konicaminolta bizhub 458 firmware (< gca-x4)
• konicaminolta bizhub 368 firmware (< gca-x4)
• konicaminolta bizhub 308 firmware (< gca-x4)
• konicaminolta bizhub c754e firmware (< gdr-m0)
• konicaminolta bizhub c654e firmware (< gdr-m0)
• konicaminolta bizhub 754e firmware (< gdr-m0)
• konicaminolta bizhub 654e firmware (< gdr-m0)
• konicaminolta bizhub c554e firmware (< gdr-m1)
• konicaminolta bizhub c454e firmware (< gdr-m1)
• konicaminolta bizhub c364e firmware (< gdr-m1)
• konicaminolta bizhub c284e firmware (< gdr-m1)
• konicaminolta bizhub c224e firmware (< gdr-m1)
• konicaminolta bizhub 554e firmware (< gdr-m1)
• konicaminolta bizhub 454e firmware (< gdr-m1)
• konicaminolta bizhub 364e firmware (< gdr-m1)
• konicaminolta bizhub 284e firmware (< gdr-m1)
• konicaminolta bizhub 224e firmware (< gdr-m1)
• konicaminolta bizhub c754 firmware (< gr4-m0)
• konicaminolta bizhub c654 firmware (< gr4-m0)
• konicaminolta bizhub c554 firmware (< gr4-m0)
… and 20 more
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- https://jvn.jp/en/vu/JVNVU95192472/index.html Third Party Advisory, VDB Entry
- https://jvn.jp/vu/JVNVU95192472/index.html Third Party Advisory, VDB Entry
- https://www.konicaminolta.com/global/newsroom/topics/2021/1224-01-01.html Mitigation, Vendor Advisory
- https://www.konicaminolta.jp/business/support/important/211224_01_01.html Mitigation, Vendor Advisory
- https://jvn.jp/en/vu/JVNVU95192472/index.html Third Party Advisory, VDB Entry
- https://jvn.jp/vu/JVNVU95192472/index.html Third Party Advisory, VDB Entry
- https://www.konicaminolta.com/global/newsroom/topics/2021/1224-01-01.html Mitigation, Vendor Advisory
- https://www.konicaminolta.jp/business/support/important/211224_01_01.html Mitigation, Vendor Advisory