Vulnerability · Published Oct 27, 2023 · Assigned by lenovo
CVE-2022-3429
Medium 6.5
In plain English
A medium-severity improper input validation in Printer G263DNS from Lenovo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.6%top 51.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an open port, triggering a denial of service that causes a display error and prevents the printer from functioning properly.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Lenovo | Printer GM265DN (production date June 2022 and before) | – before 01.00.20N |
| Lenovo | Printer GM265DN (production date July 2022 and later) | – before 01.17.00.03.00 |
| Lenovo | Printer GM266DNS | – before 02.06.00.04.00 |
| Lenovo | Printer G263DNS | – before 02.06.00.04.00 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H