#VU112051 Insufficiently protected credentials in Konica Minolta products - CVE-2025-6081

Vulnerability identifier: #VU112051

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2025-6081

CWE-ID: CWE-522

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerable software:
bizhub C751i
bizhub C651i
bizhub C551i
bizhub C451i
bizhub C361i
bizhub C301i
bizhub C251i
bizhub C4051i
bizhub C3351i
bizhub C4001i
bizhub C3301i
bizhub C3321i
bizhub 751i
bizhub 651i
bizhub 551i
bizhub 451i
bizhub 361i
bizhub 301i
bizhub 4751i
bizhub 4051i
bizhub 4701i
bizhub C750i
bizhub C650i
bizhub C550i
bizhub C450i
bizhub C360i
bizhub C300i
bizhub C250i
bizhub C287i
bizhub C257i
bizhub C227i
bizhub C4050i
bizhub C3350i
bizhub C4000i
bizhub C3300i
bizhub C3320i
bizhub 950i
bizhub 850i
bizhub 750i
bizhub 650i
bizhub 550i
bizhub 450i
bizhub 360i
bizhub 300i
bizhub 306i
bizhub 266i
bizhub 246i
bizhub 226i
bizhub 4750i
bizhub 4050i
bizhub 4700i
bizhub C759
bizhub C659
bizhub C658
bizhub C558
bizhub C458
bizhub C368
bizhub C308
bizhub C258
bizhub C287
bizhub C227
bizhub C3851
bizhub C3851FS
bizhub C3351
bizhub 958
bizhub 808
bizhub 758
bizhub 658e
bizhub 558e
bizhub 458e
bizhub 368e
bizhub 308e
bizhub 558
bizhub 458
bizhub 368
bizhub 308
bizhub 367
bizhub 287
bizhub 227
bizhub 4752
bizhub 4052

Software vendor:
Konica Minolta

The vulnerability allows a remote user to compromise the target system.

The vulnerability exists due to insufficiently protected credentials. A remote administrator can direct the device to send the credential information in plain text form and obtain the credential information of the external system.

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

• https://jvn.jp/en/vu/JVNVU93850661/index.html
• https://www.konicaminolta.com/global-en/security/advisory/pdf/km-2025-0003.pdf