Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-34886

A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing an illegal string to the server-side inte

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
lenovo

Description

A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing an illegal string to the server-side interface via a script, resulting in a stack overflow.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo Printer GM265DN (production date June 2022 and before)

Default version status: unaffected

  • to < 01.00.20Naffected

Lenovo Printer GM265DN (production date July 2022 and later)

Default version status: unaffected

  • to < 01.17.00.03.00affected

Lenovo Printer GM266DNS

Default version status: unaffected

  • to < 02.06.00.04.00affected

Lenovo Printer G263DNS

Default version status: unaffected

  • to < 02.06.00.04.00affected

References