Lucene search

[email protected]CVE-2022-34887

HistoryOct 27, 2023 - 7:15 p.m.

CVE-2022-34887

2023-10-2719:15:40

CWE-287

[email protected]

web.nvd.nist.gov

cve-2022-34887

lenovo

printer

security issue

authentication bypass

vulnerability

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenticate with the administrator password.

Affected configurations

NVD

Node

lenovogm265dn_firmwareMatch-

AND

lenovogm265dnMatch-

Node

lenovogm266dns_firmwareRange<02.06.00.04.00

AND

lenovogm266dnsMatch-

Node

lenovog263dns_firmwareRange<02.06.00.04.00

AND

lenovog263dnsMatch-

CPENameOperatorVersion
lenovo:gm265dn_firmwarelenovo gm265dn firmwareeq-

CPE	Name	Operator	Version
lenovo:gm265dn_firmware	lenovo gm265dn firmware	eq	-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Printer GM265DN (production date June 2022 and before)",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "01.00.20N",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Printer GM265DN (production date July 2022 and later)",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": " 01.17.00.03.00",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Printer GM266DNS",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "02.06.00.04.00",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Printer G263DNS",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "02.06.00.04.00",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  }
]

References

iknow.lenovo.com.cn/detail/205041.html

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

5.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

Related for CVE-2022-34887

nvd1 prion1 cvelist1