Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-34886

A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing an illegal string to the server-side interface via a script, resulting in a stack overflow.

Published

2023-10-27T19:15:40.913

Last Modified

2024-11-21T07:10:22.493

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-120
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System lenovo gm265dn_firmware - Yes
Hardware lenovo gm265dn - No
Operating System lenovo gm266dns_firmware < 02.06.00.04.00 Yes
Hardware lenovo gm266dns - No
Operating System lenovo g263dns_firmware < 02.06.00.04.00 Yes
Hardware lenovo g263dns - No
References