CVE-2022-3429
Medium
Description
A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an open port, triggering a denial of service that causes a display error and prevents the printer from functioning properly.
SeverityMedium
CVSS6.5
Exploit probability—
ProductLenovo Gm265dn Firmware
PublishedOct 27, 2023
First seenOct 27, 2023
Weakness typeCWE-20Improper input validation
How to fix
Update
- lenovo gm266dns_firmware02.06.00.04.00 or later
- lenovo g263dns_firmware02.06.00.04.00 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo gm265dn_firmware | No range specified | — |
| lenovo gm266dns_firmware | v < 02.06.00.04.00 | 02.06.00.04.00 |
| lenovo g263dns_firmware | v < 02.06.00.04.00 | 02.06.00.04.00 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.