CVE-2022-34886

State: Published
Severity: 8.8 High
Published: Oct 27, 2023
Updated: Sep 10, 2024
Reserved: Jun 30, 2022

Description

A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing an illegal string to the server-side interface via a script, resulting in a stack overflow.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	lenovo

Weaknesses

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

Product	Versions
Printer GM265DN (production date June 2022 and before)Lenovo	before 01.00.20NAffected
Printer GM265DN (production date July 2022 and later)Lenovo	before 01.17.00.03.00Affected
Printer GM266DNSLenovo	before 02.06.00.04.00Affected
Printer G263DNSLenovo	before 02.06.00.04.00Affected

References

https://iknow.lenovo.com.cn/detail/205041.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.