Lucene search

LenovoCVELIST:CVE-2022-34887

HistoryOct 27, 2023 - 6:48 p.m.

CVE-2022-34887

2023-10-2718:48:18

CWE-287

lenovo

www.cve.org

lenovo printers

configuration

authentication

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

JSON

Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenticate with the administrator password.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Printer GM265DN (production date June 2022 and before)",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "01.00.20N",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Printer GM265DN (production date July 2022 and later)",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": " 01.17.00.03.00",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Printer GM266DNS",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "02.06.00.04.00",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Printer G263DNS",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "02.06.00.04.00",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  }
]

References

iknow.lenovo.com.cn/detail/205041.html

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

JSON

Related for CVELIST:CVE-2022-34887