CVE-2022-34886
Published: Oct 27, 2023
Modified: Sep 10, 2024
CVSS v3.1
8.8
Description
A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing an illegal string to the server-side interface via a script, resulting in a stack overflow.
| Vendor | Product | Versions |
|---|---|---|
Lenovo | Printer GM265DN (production date June 2022 and before) | affected - < 01.00.20N |
Lenovo | Printer GM265DN (production date July 2022 and later) | affected - < 01.17.00.03.00 |
Lenovo | Printer GM266DNS | affected - < 02.06.00.04.00 |
Lenovo | Printer G263DNS | affected - < 02.06.00.04.00 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now