Dear Customers,

We deeply appreciate your constant patronage to Develop products.

A Pass-Back Attack vulnerability has been newly identified in the indicated models below.

This advisory provides an overview of the issue and the recommended countermeasures.

Please note that, at the time of publication (June 30th, 2025), there have been no confirmed security incidents globally resulting from the exploitation of this vulnerability.

Impact on Multifunction Printers

There is a possibility that authentication credentials configured for external services—such as LDAP, SMTP, FTP, SMB, or WebDAV—may be exposed by means of a malicious server connection.

Vulnerability Specific Recommendation

1. Ensure that the administrator password is secure. If it remains set to its factory default, please change it immediately to a strong complex password.
2. Restrict non-admin users from making any address book destination changes.
3. When utilizing any external service, avoid registering accounts with elevated privileges—such as those used in systems like Active Directory—on the multifunction printers.

General Security Recommendations

To ensure a secure operating posture for your multifunction devices, and to reduce exposure to the vulnerabilities described in this advisory, Develop strongly recommends applying the following configuration best practices:

1. Avoid Direct Internet Exposure
   Place devices behind firewalls and use private IP addressing and Device IP Filtering settings.
2. Change Default Passwords
   Change default credentials and implement strong passwords for administrative and network functions.
3. Use Strong Passwords for Services
   Ensure strong credentials are configured for SMTP, LDAP, SMB, WebDAV, and any other integrated services.
4. Disable Unused Services
   Turn off unused ports or protocols to reduce attack surface.
5. Use Secure Protocols
   Configure devices to use encrypted communications (e.g., HTTPS, LDAPS, IPPS) where supported.
6. Monitor Device Activity
   Regularly review device logs and network traffic for suspicious behavior.
7. Enable Authentication Where Available
   Use built-in user authentication features to prevent unauthorized access to device functions.

For comprehensive information on secure configuration, please refer to our product security web site.
https://www.konicaminolta.com/global-en/security/mfp/setting/index.html

Enhancing the Security of Products and Services

Develop considers the security of its products and services to be an important responsibility and will continue to actively respond to incidents and vulnerabilities.
https://www.konicaminolta.com/about/csr/social/customers/enhanced_security.html

Acknowledgements

We would like to express our sincere appreciation to Mr. Deral Heiland of Rapid7 and security researcher Mr. Vladislav Volozhenko for discovering and responsibly reporting this vulnerability.

Contact

Should you require further clarification or assistance with implementing the recommended measures or applying the relevant firmware update, please contact your authorized Develop service representative.