Information Critical Security Vulnerability

Log4J

Log4J – 3rd update

Langenhagen, Germany, 27 January 2022

This is an update on the recent communication about a critical vulnerability with the highest risk rating affecting certain applications and services that we have provided a few days ago. Details can be found in the different sections for the Konica Minolta offering.

We can confirm that we checked the status of the following software, services and products and confirm they are not affected by the vulnerability.

If you don’t find a specific product you have from our offering on these lists, please get in touch with us.

 

Applications

 

Cloud and Mobile Printing

  • EveryonePrint Hybrid Cloud Platform (HCP)
  • EveryonePrint (Mobile Print)
  • KM Mobile Print 

Collaboration & Communication

  • Workplace Go
  • dokoni Sync&Share

Colour Management

  • ColorCentro

Connectivity

  • BENS Server

Device Management

  • Fleet RMM
  • Remote Deployment Tool (RDT)
  • Printfleet
  • CS Remote Care (CSRC)
  • AccurioPro Dashboard Essential
  • Net Care Device Manager (NCDM)
  • Remote Service Platform (RSP)
  • Site Audit

Document Capture & Management

  • eCopy ShareScan
  • Dispatcher Phoenix
  • Document Navigator 
  • dokoni FIND
  • eCopy PDF Pro Office
  • Power PDF
  • convert+share (Develop only)
  • store+find (Develop only)
  • Invoice 365

Information Management

  • Hyland Onbase
  • M-Files
  • dokoni FIND

Make-Ready

  • AccurioPro Flux 

Output Management

  • BENS PP Spool
  • EFI Fiery Controller
  • JobCentro

Platform Technologies

  • bizhub Evolution
  • Konica Minolta MarketPlace
  • IWS  Deployment Tool 

Print Automation

  • AccurioPro Flux 

Security

  • bEST Guard

User & Cost Management

  • Dispatcher Paragon
  • SafeQ 
  • PageScope Enterprise Suite (PSES)
  • Pcounter

Variable Data publishing

  • PlanetPress
  • OL Connect (version 2018.1 or later)
  • PrintShop Mail Connect (version 2018.1 or later)
  • PlanetPress Connect (version 2018 or later)
  • PReS Connect (version 2018 or later)
  • AccurioPro Variable Data

Web-to-Print

  • AccurioPro Flux Ultimate


Office Printing

 

Office Printing A3 Black & White

  • bizhub 423/363/283/223 
  • bizhub 652/552/602/502 
  • bizhub 754/654/754e/654e 
  • bizhub 554/454/364/284/224/554e/454e/364e/284e/224e 
  • bizhub 958/808/758, bizhub PRO 958 
  • bizhub 558/458/368/308 
  • bizhub 658e/558e/458e/368e/308e 
  • bizhub 367/287/227 
  • bizhub 750i 
  • bizhub 650i/550i/450i/360i/300i 
  • bizhub 306i/266i/246i/226i 
  • bizhub 246/226/206 
  • bizhub 225i/205i 
  • bizhub 185e/165e 
  • bizhub 185en/165en 
  • bizhub 306/266 

Office Printing A3 Color

  • bizhub C360/C280/C220 
  • bizhub C652/C652DS/C552/C552DS/C452 
  • bizhub C754/C654/C754e/C654e 
  • bizhub C554/C454/C364/C284/C224/ C554e/C454e/C364e/C284e/C224e 
  • bizhub C281/C221/C221s 
  • bizhub C658/C558/C458 
  • bizhub C368/C308/C258 
  • bizhub C287/C227 
  • bizhub C759/C659 
  • bizhub C286/C226 
  • bizhub C360i/C300i/C250i 
  • bizhub C650i/C550i/C450i 
  • bizhub C750i 
  • bizhub C287i/C257i/C227i/C266i/C256i/C226i 

Office Printing A4 Black & White

  • bizhub 4750/4050 
  • bizhub 4752/4052 
  • bizhub 4750i/4050i 
  • bizhub 4700i 
  • bizhub 4700P/4000P/3300P 
  • bizhub 3301P 
  • bizhub 4702P/4402P/3602P 
  • bizhub 4020/3320 
  • bizhub 4422/3622 
  • bizhub 5020i 
  • bizhub 4020i 
  • bizhub 5000i 
  • bizhub 4000i 
  • pagepro 1550DN 
  • pagepro 1590MF/1580MF 
  • bizhub 16/15 
  • bizhub 3080MF/3000MF 
  • pagepro 1500W / bizhub 12P 
  • bizhub 2600P 
  • bizhub 20 
  • bizhub 20P 

Office Printing A4 Color

  • bizhub C3350/C3850/C3850FS 
  • bizhub C3100P 
  • bizhub C3110 
  • bizhub C3351/C3851/C3851FS 
  • bizhub C4050i/C3350i 
  • bizhub C4000i/C3300i 
  • bizhub C3320i 

Office Printing Controller

  • bizhub C554e/C454e/C364e/ C284e/C224e 
  • bizhub C658/C558/C458 
  • bizhub C368/C308/C258 
  • bizhub C754e/C654e 
  • bizhub C759/C659 
  • bizuhub C360i/C300i/C250i 
  • bizuhub C650i/C550i/C450i 
  • bizuhub C750i 


Professional Printing

 

Production Printing CMYK

  • bizhub PRESS C1100/C1085 with IC-602 (KM)
  • AccurioPress C6100/C6085 with IC-604 (KM)
  • AccurioPress C14000/C12000 with IC-610 (KM)
  • bizhub PRESS C1070/C1060 with IC-602 (KM)
  • AccurioPress C2070(P)/C2060 with IC-603(KM)
  • AccurioPress C3080(P)/C3070(P) with IC-605 (KM)
  • AccurioPrint C4065 with IC-607 (KM)
  • AccurioPress C4080/C4070 with IC-609 (KM)
  • AccurioPress C7100/C7090 with IC-609 (KM)
  • bizhub PRESS C8000/C7000/C70hc with IC-601 (KM)
  • bizhub PRESS C1100/C1085 with IC-308/310 (Fiery)
  • AccurioPress C6100/6085 with IC-314 (Creo/Kodak)
  • AccurioPress C6100/6085 with IC-315  (Fiery)
  • AccurioPress C14000/C12000 with IC-316 (Creo)
  • AccurioPress C14000/C12000 with IC-318 (Fiery)
  • AccurioPress C14000/C12000 with IC-319 (Fiery)
  • bizhub PRESS C1070(P)/C1060 /C1060LC71hc with IC-308 (Fiery)
  • bizhub PRESS C1070(P)/C1060 /C1060LC71hc with IC-415 (Fiery)
  • AccurioPress C2070(P)/C2060 with IC-314 (Creo)
  • AccurioPress C2070(P)/C2060 with IC-313 (Fiery)
  • AccurioPress C2070(P)/C2060 with IC-417 (Fiery)
  • AccurioPress C3080(P)/C3070(P) with IC-314 (Creo)
  • AccurioPress C4080/C4070/C4065 with IC-419 (Fiery)
  • AccurioPress C4080/C4070/C4065 with IC-317 (Fiery)
  • AccurioPress C7100/C7090 with IC-316 (Creo)
  • AccurioPress C7100/C7090 with IC-318L (Fiery)
  • AccurioPress C7100/C7090 with IC-319 (Fiery)
  • bizhub PRESS C8000/C7000/C70hc with IC-306 (Fiery)
  • bizhub PRESS C8000/C7000/C70hc with IC-413 (Fiery)
  • bizhub PRO C6500/C6501 with IC-303 (Fiery)
  • bizhub PRO C6500/C6501 with IC-305 (Fiery)
  • bizhub PRO C500(8050) with IC-302 (Fiery)
  • bizhub PRO C500(8050) with IC-405 (Fiery)
  • bizhub PRO C500(8050) with IP-901 (Fiery)
  • bizhub PRO C500(8050) with IP-921 (Fiery)

Production Printing Monochrome

  • bizhub PRO 1100
  • AccurioPress 6136/P/6120
  • bizhub PRESS 2250P
  • bizhub PRESS 1250/1250P/1052/ bizhub PRO 951
  • bizhub PRO1200/1051
  • bizhub PRO 950
  • bizhub PRO 1050/bizhub PRO 1050e
  • bizhub PRO 920
  • AccurioPrint 2100

Industrial Printing

  • AccurioJet KM-1
  • bizhub PRESS C71cf with IC-602 (KM) 
  • AccurioLabel 190 with IC-602 (KM)
  • AccurioLabel 230 with IC-605 (KM)
  • JET varnish 3D 
  • JET varnish 3DS 
  • JET varnish 3D One 
  • JET varnish 3D Evolution 
  • JET varnish 3D Web 
  • MGI HPW/PW workstations "


Log4J – 2nd update

Langenhagen, Germany, 17 December 2021

This is an update on the recent communication about a critical vulnerability with the highest risk rating affecting certain applications and services that we have provided a few days ago. Details can be found when scrolling down.

We are working with highest priority and speed on evaluating which of our offered applications are affected. 

So far, we can confirm that we checked the status of the following software and services and confirm they are not affected by the vulnerability:
  • bizhub Evolution
  • CSRC
  • Remote Service Platform (RSP)
  • Konica Minolta Remote Support (KMRS)
  • AccurioPro Flux, Dispatcher Phoenix
  • FleetRMM
  • dokoni Find
  • dokoni Sync&Share
  • M-Files
  • eCopy PDF Pro Office
  • OL Connect
  • BENS PP spool
  • BENS Server
  • Document Navigator
  • Site Audit
  • Direct Smile/MDxM (Market Direct Cross Media)
  • Power PDF
  • PageScope Enterprise Suite (PSES)
  • PrintFleet
  • Remote Deployment Tool (RDT)
  • EveryonePrint (Mobile Print)
  • EveryonePrint Hybrid Cloud Platform (HCP)
  • convert+share
  • Pcounter
  • bizhub Remote Panel (Remote Panel Server)
  • Box Operator
  • Data Administrator
  • HDD BackUp Utility
  • HDD TWAIN Driver
  • IWS Deployment Tool
  • License Install Utility
  • Log Management Utility
  • Panel Customize Tool
  • Print Status Notifier
  • Real Time Mode TWAIN Driver
  • Tools for LK-114
  • IJ Manager, JobCentro
  • ColorCentro
  • AccurioPro Variable Data (Plugin for Indesign)
  • Colibri, SpectraMagic DX
  • SpectraMagic NX
  • PaperManager
  • Easy Checker 2007
  • bizhub ECO Treedom
  • Assistant App
  • Browser registration tool
  • Connector for SMB
  • Connector for FTP
  • Connector for WebDAV
  • Scan to Servers (WPH)
  • IWS generation two
  • Primera Retail App
  • Boot screen converter
  • SECURE Notifier Widget
  • Widgets in general – IT 6 and IWS GEN 2
  • OP Products
Regarding hardware, Konica Minolta’s own MFPs are not affected, as well as for PP products the EFI Fiery controller and the Creo controller are not affected. Bens G4 and USB card reader / Authentication device Hardware are not affected either.

The status of software and services that are not on the list is still under evaluation. 

As the security of our devices, applications and services is of highest concern, we are working on resolving the topic with highest priority and speed and will keep posting updates on the missing software/services as fast as possible.



 

Log4J - 1st Update


Langenhagen, Germany, 13 December 2021

Konica Minolta has been made aware of a critical vulnerability with the highest risk rating affecting certain applications and services.

The threat is a remote code execution (CVE-2021-44228) vulnerability affecting all service providers using Java library Log4J (all versions 2.# before version 2.15.0). If exploited, this vulnerability allows remote code execution on vulnerable servers, giving an attacker the ability to import malware that allows them to take control of targeted systems.

Since this is still an early stage, we do not yet have a list of affected applications/offerings from Konica Minolta for you. We are currently evaluating which versions of which offered applications are affected and if so, how to remedy the vulnerability.

Regarding our internal systems, we have proactively disconnected all 590 internet facing systems from the internet on Sunday, 2 pm CET, to protect customer data and services. After a thorough investigation we were able to patch and verify most of the systems and have been reconnected to the Internet on Sunday, 11 pm CET. The remaining systems will be reconnected to the internet once we ensured that they are not vulnerable.

For Konica Minolta, the security of our devices, applications and services is of highest concern. We are working on resolving the topic with highest priority and speed and will provide regular updates.