Yes—SEC Consult found that certain Konica Minolta bizhub multifunction printers (MFPs) could be compromised by someone standing at the device and connecting a USB keyboard. The 2022 disclosure covered 46 models and described a chain that could escape the touchscreen kiosk, reach the underlying operating system with root privileges, and expose administrator passwords. Konica Minolta supplied fixes beginning in 2020, but installation often required an on-site service visit. The number cited in the disclosure—“hundreds of thousands of devices worldwide”—is a historical estimate of affected devices in the field, not a current count of unpatched printers.
What the vulnerability allowed
The attack required unauthenticated physical access to the printer’s touchscreen. SEC Consult connected an external USB keyboard and used it to escape the normal kiosk interface. Components of the terminal interface ran in Chromium kiosk mode; the browser operated with root privileges, which exposed the device’s underlying operating system and files.
As an Amazon Associate I earn from qualifying purchases.
SEC Consult reported three related vulnerabilities:
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitches- CVE-2022-29586: a sandbox escape that helped break out of the restricted interface.
- CVE-2022-29587: root-privileged Chromium and the resulting access to the system.
- CVE-2022-29588: administrator passwords stored in clear text in accessible files.
These weaknesses formed a connected attack path. They did not describe an unauthenticated internet attack that could compromise every printer remotely.
#1 Best Overall
- TTCopier Genuine OEM Konica Minolta TN324 Complete Toner Cartridge Set CMYK Bizhub C258 Bizhub C308 Bizhub C368
What an attacker could do after gaining access
With control of the interface and access to the operating system, an attacker could tamper with what appeared on the touchscreen. SEC Consult demonstrated a scenario in which a user could be misled into scanning a document and forwarding it to a server controlled by the attacker.
That demonstration shows a plausible document-theft and phishing path; it is not evidence that every affected printer was compromised or that remote compromise happened automatically. The attacker first needed physical access to the terminal, and the device’s network connections would still determine where scanned data could be sent.
Rank #2
- Products Name: TN-328/TN-626 Toner Cartridge
- Compatible Printers: Compatible with Konica Minolta bizhub C250i C251i C300i C301i C360i C361i C450i C451i C550i C551i C650i C651i Printers
- Page Yield: 28,000 Pages for TN-328/TN-626 Black Toner Cartridge, 28,000 Pages for each TN-328/TN-626 Color Toner Cartridge at 5% coverage in A4
- What's in the Box: Four pack TN-328/TN-626 Toner Cartridge
- High Performance: We provide the best printing effect for users like the original with consistency, vibrant color, sharp performance
Which bizhub models were affected?
SEC Consult listed 46 affected bizhub models and noted that Konica Minolta’s list also included rebranded devices. The researcher specifically tested the bizhub C3300i and C3350i. Fixed firmware versions vary by model, so one version number cannot be applied across the product line.
Recommended Free Tools
| Device information | What the disclosure establishes |
|---|---|
| Models tested by SEC Consult | bizhub C3300i and C3350i |
| Models listed as affected | 46 bizhub models, including rebranded devices in the vendor’s model list |
| Fixed version example | C3300i and C3350i: G00-7B or later, according to the advisory |
| Other models’ fixed versions | Different by model; consult the exact model entry in Konica Minolta’s advisory |
Check the full model-specific advisory rather than assuming that firmware labeled G00-7B applies to another printer.
Rank #3
- Product Quantity: 4-pack tn221 tn321 toner cartridge black cyan yellow magenta
- Compatible With Printers: Konica Minolta Bizhub C227 C287 C224 C284 C364 C224e C284e C364e Printer
- High Page Yield:9000 pages per TN321K A33K130 toner black;6,000 pages per TN321C A33K430 cyan, TN321M A33K330 magenta,TN321Y A33K230 yellow,at 5% coverage of A4 Letter
- SkyPrint tn221 tn321 toner cartridges come with intelligent chips that automatically recognize and provide printing, Not damaging the machine,Shake the toner cartridge horizontally 2-3 times before use to evenly distribute the toner,providing you with better clear and natural printing effect
- Skyprint Service:When purchasing tn221 tn321 toner cartridge, please confirm if your printer model meets the requirements. If you have any questions about the purchasing process and receive defective or damaged products, please us as soon as possible. We will provide you with service. Wishing you a pleasant shopping experience
Why the “hundreds of thousands” figure needs context
SEC Consult reported that Konica Minolta described hundreds of thousands of affected devices worldwide as being in the field in 2022. That is an historical installed-device estimate. The available disclosure does not establish how many of those printers remain unpatched today, how many were retired, or how many were ever exposed in an attack.
Were patches released?
According to SEC Consult, Konica Minolta supplied firmware and operating-system patches at the beginning of 2020. Deployment could be slow because updates often had to be installed on site by service technicians; COVID-19 lockdowns further delayed visits. A patch being available therefore does not prove that a particular printer received it.
Rank #4
- Purchase Notes: For your convenience, before purchasing please refer to the Product Description as below
- Compatible Printers: Replacement for Konica Minolta Bizhub 224E 227 284E 287 364E 367
- High Capacity: 24,000 Pages at 5% Coverage (Letter /A4)
- Reliable Quality: LCL TN323 cartridge uses high quality toner, toner particle size distribution, good mobility, high transfer rate, resulting in a clear image and high gloss print effect; Printing efficiency is high, waste powder rate is low, so as to ensure sufficient page yield.
- Condition: Our compatible cartridges from ISO 9001/14001; STMC; CE; ROHS Certified factory.LCL compatible supplies provide high-quality raw materials to ensure printing effect, and strict management ensure the stable quality
How to verify a device
- Record the printer’s exact bizhub model, including any regional or rebranded designation.
- Find the model’s firmware version in the device information or administrator interface.
- Compare that version with the fixed version listed for that exact model in Konica Minolta’s security advisory.
- If the version cannot be confirmed, contact a Konica Minolta representative or authorized service provider and request model-specific verification or installation.
Organizations with sensitive documents should also consider a professional security review, particularly when they cannot establish update history or control who can reach the printer.
Documented workaround when an update is not yet verified
The advisory documents two configuration steps:
- In the Customer Administrator settings, disable use of an external USB keyboard.
- Change the Customer Administrator password.
This reduces the documented attack path and removes exposure of a known administrator credential, but it is a workaround—not a replacement for the applicable firmware and operating-system update. Restrict physical access to the printer as an additional operational control while remediation is arranged.
Best Value
- The Package Contains: TN-626 TN626 Toner Cartridge TN626K TN626C TN626M TN626Y 4 Pack (Black Cyan Magenta Yellow) AAJW430 AAJW330 AAJW230 AAJW130
- Compatible with Konica Minolta: Bizhub C450i C550i C650i Printer
- Exceptional Page Yield: 28000 Pages per TN626K Black toner cartridges, 28000 Pages per TN626C TN626M TN626Y color toner cartridges, 5% coverage at A4 paper
- Reliable Quality Assurance: Rest easy knowing our TN-626 TN626 cartridges are ISO-9001 and ISO-14001 certified for stable, high-quality printouts every time. Whether it's documents, presentations, or photos, you can trust our cartridges to deliver consistent results
- Easy Installation and Use: Our TN626 toner cartridges are designed for easy installation and use, so you can spend less time troubleshooting and more time printing. Simply pop them in, and you're ready to go
What administrators should do now
- Inventory every Konica Minolta bizhub and any rebranded unit, including devices at branch offices and unattended areas.
- Check each exact model against the advisory’s affected-model and fixed-firmware entries.
- Verify the installed firmware rather than relying on purchase date, service records, or a vendor statement that an update was released.
- Disable external USB keyboard use and change the Customer Administrator password where the update has not been confirmed.
- Review whether printers can reach external destinations and examine scan-routing or server logs for unusual forwarding.
- Arrange authorized service if the update requires on-site installation.
- After remediation, document the firmware version, date, technician or administrator, and the device’s physical location.
Bottom line for owners
The disclosed Konica Minolta issue was a physical-access vulnerability in certain bizhub MFPs, not a blanket claim that all Konica printers were remotely hackable. A USB keyboard could help an attacker escape the touchscreen kiosk; root-level access and clear-text administrator passwords then created opportunities to alter the interface and redirect scanned documents. Patches were supplied starting in 2020, but only a model-specific firmware check can show whether an individual printer is protected.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
