Lucene search
HistoryOct 27, 2023 - 7:15 p.m.
CVE-2022-34887
lenovo printers
configuration
authentication
cve-2022-34887
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
4.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.0%
Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenticate with the administrator password.
Affected configurations
Node
lenovogm265dn_firmwareMatch-
lenovogm265dnMatch-
Node
lenovogm266dns_firmwareRange<02.06.00.04.00
lenovogm266dnsMatch-
Node
lenovog263dns_firmwareRange<02.06.00.04.00
lenovog263dnsMatch-
References
Related
cve
cve
CVE-2022-34887
2023-10-27 19:15:40
cvelist
cvelist
CVE-2022-34887
2023-10-27 18:48:18
prion
prion
Design/Logic Flaw
2023-10-27 19:15:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
4.7 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.0%
Related for NVD:CVE-2022-34887