CVE-2022-3429 - A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an open port, triggering a denial of service that causes a display error and prevents the printer from functioning properly

Back Back to CVE browser

MEDIUM

A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an open port, triggering a denial of service that causes a display error and prevents the printer from functioning properly

Published Oct 27, 2023

6.5

MEDIUM

CVSS 3.1

EPSS 0.49%

Description

A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an open port, triggering a denial of service that causes a display error and prevents the printer from functioning properly.

Affected products

Vendor Lenovo Product Printer G263DNS Default
unaffected
Affected
- < 02.06.00.04.00
Vendor Lenovo Product Printer GM265DN (production date July 2022 and later) Default
unaffected
Affected
- < 01.17.00.03.00
Vendor Lenovo Product Printer GM265DN (production date June 2022 and before) Default
unaffected
Affected
- < 01.00.20N
Vendor Lenovo Product Printer GM266DNS Default
unaffected
Affected
- < 02.06.00.04.00

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Lenovo	Printer G263DNS	unaffected	Affected < 02.06.00.04.00
Lenovo	Printer GM265DN (production date July 2022 and later)	unaffected	Affected < 01.17.00.03.00
Lenovo	Printer GM265DN (production date June 2022 and before)	unaffected	Affected < 01.00.20N
Lenovo	Printer GM266DNS	unaffected	Affected < 02.06.00.04.00

Remediation

Vendor solution

Upgrade printer firmware to the version (or later) listed in the Customer Mitigation section of LEN-101969 - https://iknow.lenovo.com.cn/detail/205041.html .

Weaknesses (1)

CWE-20

Improper Input Validation