CVE-2022-3429

State: Published
Severity: 6.5 Medium
Published: Oct 27, 2023
Updated: Sep 9, 2024
Reserved: Oct 7, 2022

Description

A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an open port, triggering a denial of service that causes a display error and prevents the printer from functioning properly.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	lenovo

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
Printer GM265DN (production date June 2022 and before)Lenovo	before 01.00.20NAffected
Printer GM265DN (production date July 2022 and later)Lenovo	before 01.17.00.03.00Affected
Printer GM266DNSLenovo	before 02.06.00.04.00Affected
Printer G263DNSLenovo	before 02.06.00.04.00Affected

References

https://iknow.lenovo.com.cn/detail/205041.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.