CVE-2022-34887
Medium
Description
Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenticate with the administrator password.
SeverityMedium
CVSS4.3
Exploit probability—
ProductLenovo Gm265dn Firmware
PublishedOct 27, 2023
First seenOct 27, 2023
Weakness typeCWE-287Improper authentication
How to fix
Update
- lenovo gm266dns_firmware02.06.00.04.00 or later
- lenovo g263dns_firmware02.06.00.04.00 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo gm265dn_firmware | No range specified | — |
| lenovo gm266dns_firmware | v < 02.06.00.04.00 | 02.06.00.04.00 |
| lenovo g263dns_firmware | v < 02.06.00.04.00 | 02.06.00.04.00 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.