CVE-2022-34887

State: Published
Severity: 4.3 Medium
Published: Oct 27, 2023
Updated: Sep 9, 2024
Reserved: Jun 30, 2022

Description

Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenticate with the administrator password.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	lenovo

Weaknesses

CWE-287 Improper Authentication

Affected Products

Product	Versions
Printer GM265DN (production date June 2022 and before)Lenovo	before 01.00.20NAffected
Printer GM265DN (production date July 2022 and later)Lenovo	before 01.17.00.03.00Affected
Printer GM266DNSLenovo	before 02.06.00.04.00Affected
Printer G263DNSLenovo	before 02.06.00.04.00Affected

References

https://iknow.lenovo.com.cn/detail/205041.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.