VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Oct 27, 2023· Updated Jun 17, 2026

CVE-2022-34887

CVE-2022-34887

Description

Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenticate with the administrator password.

Affected products

8
  • Lenovo/Printer GM265DN (production date June 2022 and before)v5
    Range:
  • Lenovo/Printer GM265DN (production date July 2022 and later)v5
    Range:
  • Lenovo/Printer GM266DNSv5
    Range:
  • Lenovo/Printer G263DNSv5
    Range:
  • Lenovo/printersllm-fuzzy
  • Lenovo/Gm265dn Firmware
    cpe:2.3:o:lenovo:gm265dn_firmware:-:*:*:*:*:*:*:*
  • Lenovo/Gm266dns Firmware
    cpe:2.3:o:lenovo:gm266dns_firmware:*:*:*:*:*:*:*:*
    Range: <02.06.00.04.00
  • Lenovo/G263dns Firmware
    cpe:2.3:o:lenovo:g263dns_firmware:*:*:*:*:*:*:*:*
    Range: <02.06.00.04.00

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.