{"id":11574,"date":"2025-10-30T13:47:13","date_gmt":"2025-10-30T06:47:13","guid":{"rendered":"https:\/\/www.konicaminolta.vn\/business\/?page_id=11574"},"modified":"2025-10-30T17:43:52","modified_gmt":"2025-10-30T10:43:52","slug":"dos-vulnerability-in-the-web-connection-of-konica-minolta-multifunction-printers","status":"publish","type":"page","link":"https:\/\/www.konicaminolta.vn\/business\/en\/dos-vulnerability-in-the-web-connection-of-konica-minolta-multifunction-printers\/","title":{"rendered":"DoS Vulnerability in the Web Connection of Konica Minolta Multifunction Printers"},"content":{"rendered":"

DoS Vulnerability in the Web Connection of Konica Minolta Multifunction Printers<\/strong><\/p>\n

Dear Customers,<\/p>\n

We deeply appreciate your constant patronage to Konica Minolta products.<\/p>\n

A vulnerability that allows a Denial-of-Service (DoS) attack has been newly identified in the indicated models. This advisory provides an overview of the issue and the recommended countermeasures.<\/p>\n

Please note that, at the time of publication (August 29th, 2025), there have been no confirmed security incidents globally resulting from the exploitation of this vulnerability.<\/p>\n

Overview of the vulnerabilities<\/strong><\/p>\n\n\n\n\n
Ref. ID<\/strong><\/td>\nCVSSv3.1<\/strong><\/td>\nBase Score<\/strong><\/td>\nVulnerabilities description<\/strong><\/td>\n<\/tr>\n
CVE-2025-54777<\/td>\nCVSS:3.1\/AV:A\/AC:L\/PR:N\/UI:N\/S:U\/C:N\/I:N\/A:L<\/td>\n4.3<\/td>\nImporting a malformed file in [Registration of Certification Information] for S\/MIME for Email Destination causes the Web Connection to stop.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Affected Models and the countermeasure firmware<\/strong><\/p>\n\n\n\n\n\n\n\n\n
Product name<\/strong><\/td>\nAffected Version<\/strong><\/td>\nFixed Version<\/strong><\/td>\n<\/tr>\n
bizhub C751i<\/p>\n

bizhub C651i\/C551i\/C451i<\/p>\n

bizhub C361i\/C301i\/C251i<\/p>\n

bizhub C4051i\/C3351i\/C4001i\/C3301i<\/p>\n

bizhub C3321i<\/p>\n

bizhub 751i<\/p>\n

bizhub 651i\/551i\/451i<\/p>\n

bizhub 361i\/301i<\/p>\n

bizhub 4751i\/4051i<\/p>\n

bizhub 4701i<\/p>\n

bizhub C750i<\/p>\n

bizhub C650i\/C550i\/C450i<\/p>\n

bizhub C360i\/C300i\/C250i<\/p>\n

bizhub C287i\/C257i\/C227i<\/p>\n

bizhub C4050i\/C3350i\/C4000i\/C3300i<\/p>\n

bizhub C3320i<\/p>\n

bizhub 950i\/850i<\/p>\n

bizhub 750i<\/p>\n

bizhub 650i\/550i\/450i<\/p>\n

bizhub 360i\/300i<\/p>\n

bizhub 306i\/266i\/246i\/226i<\/p>\n

bizhub 4750i\/4050i<\/p>\n

bizhub 4700i<\/td>\n

G00-RE or earlier<\/td>\nGC2-RE or later
\n(Except G00-RF)<\/td>\n<\/tr>\n
bizhub C759\/C659<\/p>\n

bizhub C658\/C558\/C458<\/p>\n

bizhub 958\/808\/758<\/p>\n

bizhub 658e\/558e\/458e<\/p>\n

bizhub C287\/C227<\/td>\n

GCQ-Y2 or earlier<\/td>\nGCR-Y2 or later<\/td>\n<\/tr>\n
bizhub C368\/C308\/C258<\/p>\n

bizhub 558\/458\/368\/308<\/p>\n

bizhub C3851\/C3851FS\/C3351<\/p>\n

bizhub 4752\/4052<\/td>\n

GCQ-X4 or earlier<\/td>\nGCR-X4 or later<\/td>\n<\/tr>\n
bizhub 368e\/308e<\/td>\nGCQ-X8 or earlier<\/td>\nGCR-X8 or later<\/td>\n<\/tr>\n
bizhub 367\/287\/227<\/td>\nGCQ-Y3 or earlier<\/td>\nGCR-Y3 or later<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Impact on Multifunction Printers<\/strong><\/p>\n

Web Connection becomes completely unresponsive. (Other MFP functions are not affected.)<\/p>\n

Remediation<\/strong><\/p>\n

The countermeasure firmware will be applied sequentially, either remotely or during the next visit by your authorised Konica Minolta service representative.<\/p>\n

 <\/p>\n

Vulnerability Specific Recommendation<\/strong><\/span><\/p>\n

    \n
  1. Ensure that the administrator password is secure. If it remains set to its factory default, please change it immediately to a strong complex password. Configuration: [Utility] – [Administrator] – [Security] – [Administrator Password Setting]<\/li>\n
  2. Restrict non-Admin users from making any address book destination changes. Configuration: [Utility] – [Administrator] – [Security] – [Restrict User Access] – [Registering and Changing Addresses]: [Restrict]<\/li>\n<\/ol>\n

     <\/p>\n

    General Security Recommendations<\/strong>\u00a0<\/em><\/span><\/p>\n

    To ensure a secure operating posture for your multifunction devices, and to reduce exposure to the vulnerability described in this advisory, Konica Minolta strongly recommends applying the following configuration best practices:<\/p>\n

      \n
    1. Avoid Direct Internet Exposure<\/strong><\/li>\n<\/ol>\n

      Place devices behind firewalls and use private IP addressing and Device IP Filtering settings.<\/p>\n

        \n
      1. Change Default Passwords<\/strong><\/li>\n<\/ol>\n

        Change default credentials and implement strong passwords for administrative and network functions.<\/p>\n

          \n
        1. Use Strong Passwords for Services<\/strong><\/li>\n<\/ol>\n

          Ensure strong credentials are configured for SMTP, LDAP, SMB, WebDAV, and any other integrated services.<\/p>\n

            \n
          1. Disable Unused Services<\/strong><\/li>\n<\/ol>\n

            Turn off unused ports or protocols to reduce attack surface.<\/p>\n

              \n
            1. Use Secure Protocols<\/strong><\/li>\n<\/ol>\n

              Configure devices to use encrypted communications (e.g., HTTPS, LDAPS, IPPS) where supported.<\/p>\n

                \n
              1. Monitor Device Activity<\/strong><\/li>\n<\/ol>\n

                Regularly review device logs and network traffic for suspicious behavior.<\/p>\n

                  \n
                1. Enable Authentication Where Available<\/strong><\/li>\n<\/ol>\n

                  Use built-in user authentication features to prevent unauthorised access to device functions.<\/p>\n

                   <\/p>\n

                  For comprehensive information on secure configuration, please refer to our Product Security web site.<\/a><\/p>\n

                  Enhancing the Security of Products and Services<\/strong>
                  \nKonica Minolta considers the security of its products and services to be an important responsibility and will continue to actively respond to incidents and vulnerabilities.                   Click here<\/a><\/p>\n

                  Acknowledgements<\/strong><\/p>\n

                  We would like to express our sincere appreciation to the penetration testers Miguel Alves (0xmupa) for discovering and responsibly reporting this vulnerability.<\/p><\/blockquote>\n

                  Contacts<\/strong><\/p>\n

                  Should you require further clarification or assistance with implementing the recommended measures or applying the relevant firmware update, please contact your authorised Konica Minolta service representative.<\/p>\n","protected":false},"excerpt":{"rendered":"

                  DoS Vulnerability in the Web Connection of Konica Minolta Multifunction Printers Dear Customers, We deeply appreciate your constant patronage to Konica Minolta products. A vulnerability that allows a Denial-of-Service (DoS) attack has been newly identified in the indicated models. This advisory provides an overview of the issue and the recommended countermeasures. Please note that, at<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-11574","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.konicaminolta.vn\/business\/wp-json\/wp\/v2\/pages\/11574","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.konicaminolta.vn\/business\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.konicaminolta.vn\/business\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.konicaminolta.vn\/business\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.konicaminolta.vn\/business\/wp-json\/wp\/v2\/comments?post=11574"}],"version-history":[{"count":4,"href":"https:\/\/www.konicaminolta.vn\/business\/wp-json\/wp\/v2\/pages\/11574\/revisions"}],"predecessor-version":[{"id":11600,"href":"https:\/\/www.konicaminolta.vn\/business\/wp-json\/wp\/v2\/pages\/11574\/revisions\/11600"}],"wp:attachment":[{"href":"https:\/\/www.konicaminolta.vn\/business\/wp-json\/wp\/v2\/media?parent=11574"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}