CVE-2022-34886

🗓️ 27 Oct 2023 18:40:26Reported by lenovoType

A remote code execution vulnerability found in Lenovo printers firmwar

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of Lenovo printer’s microprogramming software allows a hacker to execute arbitrary code.	10 Nov 202300:00	–	bdu_fstec
Circl	CVE-2022-34886	27 Oct 202322:17	–	circl
CNNVD	Lenovo printers security breach	27 Oct 202300:00	–	cnnvd
Cvelist	CVE-2022-34886	27 Oct 202318:40	–	cvelist
EUVD	EUVD-2022-37790	3 Oct 202520:07	–	euvd
Lenovo	Lenovo XClarity Controller (XCC) Vulnerabilities - Lenovo Support US	8 Jul 202213:35	–	lenovo
NVD	CVE-2022-34886	27 Oct 202319:15	–	nvd
Prion	Remote code execution	27 Oct 202319:15	–	prion
Positive Technologies	PT-2023-6766 · Lenovo · Lenovo Printers	27 Oct 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-34886	6 Feb 202501:36	–	redhatcve

NVD

Vulners

Vulnrichment

Node

lenovo gm265dn_firmwareMatch-

AND

lenovo gm265dnMatch-

Node

lenovo gm266dns_firmwareRange<02.06.00.04.00

AND

lenovo gm266dnsMatch-

Node

lenovo g263dns_firmwareRange<02.06.00.04.00

AND

lenovo g263dnsMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Printer GM265DN (production date June 2022 and before)",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "01.00.20N",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Printer GM265DN (production date July 2022 and later)",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": " 01.17.00.03.00",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Printer GM266DNS",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "02.06.00.04.00",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Printer G263DNS",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "02.06.00.04.00",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
iknow	www.iknow.lenovo.com.cn/detail/205041.html

21 Nov 2024 07:10Current

8.8High risk

Vulners AI Score8.8

CVSS 3.18.8

EPSS0.03791

SSVC