CVE-2025-6081: Pass-back attack in Konica Minolta bizhub 227 multifunctional printers
Vulnerability summary
CVE-2025-6081 is a medium (CVSS 6.8) Insufficiently Protected Credentials vulnerability in konica minolta bizhub 227 multifunction printers. EPSS estimates a 0.32% chance of exploitation in the next 30 days, higher than 23.2% of scored vulnerabilities.
Timeline
- 01-07-2025PublishedVulnerability first disclosed.
- 02-07-2025Last modifiedVulnerability information updated.
Description
Insufficiently Protected Credentials in LDAP in Konica Minolta bizhub 227 Multifunction printers version GCQ-Y3 or earlier allows an attacker can reconfigure the target device to use an external LDAP service controlled by the attacker. If an LDAP password is set on the target device, the attacker can force the target device to authenticate to the attacker controlled LDAP service. This will allow the attacker to capture the plaintext password of the configured LDAP service.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST6.8MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS trend
Probability
0.32%
Chance of exploitation in the next 30 days
Percentile
23%
Versus all other CVEs
30-day change
Increase +0.02 pp
From 0.29% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Konica minolta1 product
1 vendor · 1 product