← Back

CVE-2022-3429

nvd nist
Published: Oct 27, 2023Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an open port, triggering a denial of service that causes a display error and prevents the printer from functioning properly.

Affected (3)

Lenovo
3 products
Gm265dn Firmware
Gm266dns Firmware
G263dns Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Gm265dn Firmware
All versions
Running on/withPlatform Versions
Lenovo
Gm265dn
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Gm266dns Firmware
Before 02.06.00.04.00
Running on/withPlatform Versions
Lenovo
Gm266dns
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
G263dns Firmware
Before 02.06.00.04.00
Running on/withPlatform Versions
Lenovo
G263dns
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: psirt@lenovo.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.