VYPR
← All advisories
High severity8.8NVD Advisory· Published Oct 27, 2023· Updated Jun 17, 2026

CVE-2022-34886

CVE-2022-34886

Description

A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing an illegal string to the server-side interface via a script, resulting in a stack overflow.

Affected products

8
  • Lenovo/Printer GM265DN (production date June 2022 and before)v5
    Range:
  • Lenovo/Printer GM265DN (production date July 2022 and later)v5
    Range:
  • Lenovo/Printer GM266DNSv5
    Range:
  • Lenovo/Printer G263DNSv5
    Range:
  • Lenovo/firmwarellm-create
  • Lenovo/Gm265dn Firmware
    cpe:2.3:o:lenovo:gm265dn_firmware:-:*:*:*:*:*:*:*
  • Lenovo/Gm266dns Firmware
    cpe:2.3:o:lenovo:gm266dns_firmware:*:*:*:*:*:*:*:*
    Range: <02.06.00.04.00
  • Lenovo/G263dns Firmware
    cpe:2.3:o:lenovo:g263dns_firmware:*:*:*:*:*:*:*:*
    Range: <02.06.00.04.00

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.