ByteOS Network

Vulnerability Details :

CVE-2021-20870

Assigner-jpcert

Assigner Org ID-ede6fdc4-6654-4307-a26d-3331c018e2ce

Published At-04 Jan, 2022 | 03:05

Updated At-03 Aug, 2024 | 17:53

Improper handling of exceptional conditions vulnerability in KONICA MINOLTA bizhub series (bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier, bizhub 750i/650i/550i/450i G00-37 and earlier, bizhub 360i/300i G00-33 and earlier, bizhub C287i/C257i/C227i G00-19 and earlier, bizhub 306i/266i/246i/226i G00-B6 and earlier, bizhub C759/C659 GC7-X8 and earlier, bizhub C658/C558/C458 GC7-X8 and earlier, bizhub 958/808/758 GC7-X8 and earlier, bizhub 658e/558e/458e GC7-X8 and earlier, bizhub C287/C227 GC7-X8 and earlier, bizhub 287/227 GC7-X8 and earlier, bizhub 368e/308e GC7-X8 and earlier, bizhub C368/C308/C258 GC9-X4 and earlier, bizhub 558/458/368/308 GC9-X4 and earlier, bizhub C754e/C654e GDQ-M0 and earlier, bizhub 754e/654e GDQ-M0 and earlier, bizhub C554e/C454e GDQ-M1 and earlier, bizhub C364e/C284e/C224e GDQ-M1 and earlier, bizhub 554e/454e/364e/284e/224e GDQ-M1 and earlier, bizhub C754/C654 C554/C454 GR1-M0 and earlier, bizhub C364/C284/C224 GR1-M0 and earlier, bizhub 754/654 GR1-M0 and earlier, bizhub C4050i/C3350i/C4000i/C3300i G00-B6 and earlier, bizhub C3320i G00-B6 and earlier, bizhub 4750i/4050i G00-22 and earlier, bizhub 4700i G00-22 and earlier, bizhub C3851FS/C3851/C3351 GC9-X4 and earlier, bizhub 4752/4052 GC9-X4 and earlier, bizhub C3850/C3350/3850FS, bizhub 4750/4050, bizhub C3110, bizhub C3100P) allows a physical attacker to obtain unsent scanned image data when scanned data transmission is stopped due to the network error by ejecting a HDD before the scan job times out.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:jpcert

Assigner Org ID:ede6fdc4-6654-4307-a26d-3331c018e2ce

Published At:04 Jan, 2022 | 03:05

Updated At:03 Aug, 2024 | 17:53

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

KONICA MINOLTA, INC.

Product

bizhub series

Versions

Affected

bizhub C750i G00-35 and earlier, bizhub C650i/C550i/C450i G00-B6 and earlier, bizhub C360i/C300i/C250i G00-B6 and earlier, bizhub 750i/650i/550i/450i G00-37 and earlier, bizhub 360i/300i G00-33 and earlier, bizhub C287i/C257i/C227i G00-19 and earlier, bizhub 306i/266i/246i/226i G00-B6 and earlier, bizhub C759/C659 GC7-X8 and earlier, bizhub C658/C558/C458 GC7-X8 and earlier, bizhub 958/808/758 GC7-X8 and earlier, bizhub 658e/558e/458e GC7-X8 and earlier, bizhub C287/C227 GC7-X8 and earlier, bizhub 287/227 GC7-X8 and earlier, bizhub 368e/308e GC7-X8 and earlier, bizhub C368/C308/C258 GC9-X4 and earlier, bizhub 558/458/368/308 GC9-X4 and earlier, bizhub C754e/C654e GDQ-M0 and earlier, bizhub 754e/654e GDQ-M0 and earlier, bizhub C554e/C454e GDQ-M1 and earlier, bizhub C364e/C284e/C224e GDQ-M1 and earlier, bizhub 554e/454e/364e/284e/224e GDQ-M1 and earlier, bizhub C754/C654 C554/C454 GR1-M0 and earlier, bizhub C364/C284/C224 GR1-M0 and earlier, bizhub 754/654 GR1-M0 and earlier, bizhub C4050i/C3350 ...[truncated*]

Problem Types

Type	CWE ID	Description
text	N/A	Improper handling of exceptional conditions

Type: text

CWE ID: N/A

Description: Improper handling of exceptional conditions

References

Hyperlink	Resource
https://www.konicaminolta.com/global/newsroom/topics/2021/1224-01-01.html	x_refsource_MISC
https://www.konicaminolta.jp/business/support/important/211224_01_01.html	x_refsource_MISC
https://jvn.jp/en/vu/JVNVU95192472/index.html	x_refsource_MISC
https://jvn.jp/vu/JVNVU95192472/index.html	x_refsource_MISC

Hyperlink: https://www.konicaminolta.com/global/newsroom/topics/2021/1224-01-01.html

Resource:

x_refsource_MISC

Hyperlink: https://www.konicaminolta.jp/business/support/important/211224_01_01.html

Resource:

x_refsource_MISC

Hyperlink: https://jvn.jp/en/vu/JVNVU95192472/index.html

Resource:

x_refsource_MISC

Hyperlink: https://jvn.jp/vu/JVNVU95192472/index.html

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.konicaminolta.com/global/newsroom/topics/2021/1224-01-01.html	x_refsource_MISC x_transferred
https://www.konicaminolta.jp/business/support/important/211224_01_01.html	x_refsource_MISC x_transferred
https://jvn.jp/en/vu/JVNVU95192472/index.html	x_refsource_MISC x_transferred
https://jvn.jp/vu/JVNVU95192472/index.html	x_refsource_MISC x_transferred

Hyperlink: https://www.konicaminolta.com/global/newsroom/topics/2021/1224-01-01.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://www.konicaminolta.jp/business/support/important/211224_01_01.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://jvn.jp/en/vu/JVNVU95192472/index.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://jvn.jp/vu/JVNVU95192472/index.html

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:vultures@jpcert.or.jp

Published At:04 Jan, 2022 | 04:15

Updated At:13 Jan, 2022 | 12:44

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	4.6	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	1.9	LOW	AV:L/AC:M/Au:N/C:P/I:N/A:N

Type: Primary

Version: 3.1

Base score: 4.6

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Type: Primary

Version: 2.0

Base score: 1.9

Base severity: LOW

Vector:

AV:L/AC:M/Au:N/C:P/I:N/A:N

CPE Matches

konicaminolta>>bizhub_c750i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c750i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c750i>>-

cpe:2.3:h:konicaminolta:bizhub_c750i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_c650i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c650i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c650i>>-

cpe:2.3:h:konicaminolta:bizhub_c650i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_c550i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c550i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c550i>>-

cpe:2.3:h:konicaminolta:bizhub_c550i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_c450i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c450i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c450i>>-

cpe:2.3:h:konicaminolta:bizhub_c450i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_c360i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c360i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c360i>>-

cpe:2.3:h:konicaminolta:bizhub_c360i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_c300i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c300i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c300i>>-

cpe:2.3:h:konicaminolta:bizhub_c300i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_c250i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c250i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c250i>>-

cpe:2.3:h:konicaminolta:bizhub_c250i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_750i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_750i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_750i>>-

cpe:2.3:h:konicaminolta:bizhub_750i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_650i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_650i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_650i>>-

cpe:2.3:h:konicaminolta:bizhub_650i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_550i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_550i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_550i>>-

cpe:2.3:h:konicaminolta:bizhub_550i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_450i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_450i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_450i>>-

cpe:2.3:h:konicaminolta:bizhub_450i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_360i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_360i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_360i>>-

cpe:2.3:h:konicaminolta:bizhub_360i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_300i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_300i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_300i>>-

cpe:2.3:h:konicaminolta:bizhub_300i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_c287i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c287i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c287i>>-

cpe:2.3:h:konicaminolta:bizhub_c287i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_c257i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c257i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c257i>>-

cpe:2.3:h:konicaminolta:bizhub_c257i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_c227i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c227i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c227i>>-

cpe:2.3:h:konicaminolta:bizhub_c227i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_306i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_306i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_306i>>-

cpe:2.3:h:konicaminolta:bizhub_306i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_266i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_266i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_266i>>-

cpe:2.3:h:konicaminolta:bizhub_266i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_226i_firmware>>Versions before g00-e9(exclusive)

cpe:2.3:o:konicaminolta:bizhub_226i_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_226i>>-

cpe:2.3:h:konicaminolta:bizhub_226i:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_c759_firmware>>Versions before gca-y1(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c759_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c759>>-

cpe:2.3:h:konicaminolta:bizhub_c759:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_c659_firmware>>Versions before gca-y1(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c659_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c659>>-

cpe:2.3:h:konicaminolta:bizhub_c659:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_c658_firmware>>Versions before gca-y1(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c658_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c658>>-

cpe:2.3:h:konicaminolta:bizhub_c658:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_c558_firmware>>Versions before gca-y1(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c558_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c558>>-

cpe:2.3:h:konicaminolta:bizhub_c558:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_c458_firmware>>Versions before gca-y1(exclusive)

cpe:2.3:o:konicaminolta:bizhub_c458_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_c458>>-

cpe:2.3:h:konicaminolta:bizhub_c458:-:*:*:*:*:*:*:*

konicaminolta>>bizhub_958_firmware>>Versions before gca-y1(exclusive)

cpe:2.3:o:konicaminolta:bizhub_958_firmware:*:*:*:*:*:*:*:*

konicaminolta>>bizhub_958>>-

cpe:2.3:h:konicaminolta:bizhub_958:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-755	Primary	nvd@nist.gov

CWE ID: CWE-755

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://jvn.jp/en/vu/JVNVU95192472/index.html	vultures@jpcert.or.jp	Third Party Advisory VDB Entry
https://jvn.jp/vu/JVNVU95192472/index.html	vultures@jpcert.or.jp	Third Party Advisory VDB Entry
https://www.konicaminolta.com/global/newsroom/topics/2021/1224-01-01.html	vultures@jpcert.or.jp	Mitigation Vendor Advisory
https://www.konicaminolta.jp/business/support/important/211224_01_01.html	vultures@jpcert.or.jp	Mitigation Vendor Advisory

Hyperlink: https://jvn.jp/en/vu/JVNVU95192472/index.html

Source: vultures@jpcert.or.jp

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://jvn.jp/vu/JVNVU95192472/index.html

Source: vultures@jpcert.or.jp

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://www.konicaminolta.com/global/newsroom/topics/2021/1224-01-01.html

Source: vultures@jpcert.or.jp

Resource:

Mitigation

Vendor Advisory

Hyperlink: https://www.konicaminolta.jp/business/support/important/211224_01_01.html

Source: vultures@jpcert.or.jp

Resource:

Mitigation

Vendor Advisory

Similar CVEs

4Records found

CVE-2019-17391

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-4.6||MEDIUM

EPSS-0.42% / 61.10%

7 Day CHG~0.00%

Published-14 Nov, 2019 | 20:34

Updated-05 Aug, 2024 | 01:40

An issue was discovered in the Espressif ESP32 mask ROM code 2016-06-08 0 through 2. Lack of anti-glitch mitigations in the first stage bootloader of the ESP32 chip allows an attacker (with physical access to the device) to read the contents of read-protected eFuses, such as flash encryption and secure boot keys, by injecting a glitch into the power supply of the chip shortly after reset.

Vendor-espressif n/a

Product-esp32-d2wd_firmware esp32-d0wd_firmware esp32-s0wd esp32-d2wd esp32-s0wd_firmware esp32-pico-d4_firmware esp32-pico-d4 esp32-d0wd n/a

CWE ID-CWE-755

Improper Handling of Exceptional Conditions

CVE-2022-27841

Matching Score-4

Assigner-Samsung Mobile

View Details

Matching Score-4

Assigner-Samsung Mobile

CVSS Score-4.3||MEDIUM

EPSS-0.06% / 19.16%

7 Day CHG~0.00%

Published-11 Apr, 2022 | 19:37

Updated-03 Aug, 2024 | 05:41

Improper exception handling in Samsung Pass prior to version 3.7.07.5 allows physical attacker to view the screen that is previously running without authentication

Vendor-Samsung Samsung Electronics

Product-samsung_pass Samsung Pass

CWE ID-CWE-703

Improper Check or Handling of Exceptional Conditions

CWE ID-CWE-755

Improper Handling of Exceptional Conditions

CVE-2022-24448

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-3.3||LOW

EPSS-0.01% / 1.72%

7 Day CHG-0.00%

Published-04 Feb, 2022 | 19:45

Updated-03 Aug, 2024 | 04:13

An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in the file descriptor.

Vendor-n/a Linux Kernel Organization, Inc Debian GNU/Linux

Product-debian_linux linux_kernel n/a

CWE ID-CWE-755

Improper Handling of Exceptional Conditions

CWE ID-CWE-908

Use of Uninitialized Resource

CVE-2020-13463

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-4.6||MEDIUM

EPSS-0.06% / 20.07%

7 Day CHG~0.00%

Published-31 Aug, 2020 | 15:21

Updated-04 Aug, 2024 | 12:18

The flash memory readout protection in Apex Microelectronics APM32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling.

Vendor-apexmic n/a

Product-apm32f103 apm32f103_firmware n/a

CWE ID-CWE-755

Improper Handling of Exceptional Conditions

CVE-2021-20870

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs