CVE-2022-3429

A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an open port, triggering a denial of service that causes a display error and prevents the printer from functioning properly.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:lenovo:gm265dn_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:gm265dn:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:lenovo:gm266dns_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:gm266dns:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:lenovo:g263dns_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:g263dns:-:*:*:*:*:*:*:*

History

21 Nov 2024, 07:19

Type Values Removed Values Added
References () https://iknow.lenovo.com.cn/detail/205041.html - Patch, Vendor Advisory () https://iknow.lenovo.com.cn/detail/205041.html - Patch, Vendor Advisory

07 Nov 2023, 16:47

Type Values Removed Values Added
First Time Lenovo gm266dns
Lenovo gm265dn
Lenovo gm265dn Firmware
Lenovo
Lenovo g263dns
Lenovo gm266dns Firmware
Lenovo g263dns Firmware
CWE CWE-20 NVD-CWE-noinfo
References (MISC) https://iknow.lenovo.com.cn/detail/205041.html - (MISC) https://iknow.lenovo.com.cn/detail/205041.html - Patch, Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5
CPE cpe:2.3:o:lenovo:g263dns_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:g263dns:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:gm265dn:-:*:*:*:*:*:*:*
cpe:2.3:o:lenovo:gm266dns_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:lenovo:gm265dn_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:gm266dns:-:*:*:*:*:*:*:*

27 Oct 2023, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-10-27 19:15

Updated : 2024-11-21 07:19


NVD link : CVE-2022-3429

Mitre link : CVE-2022-3429

CVE.ORG link : CVE-2022-3429


JSON object : View

Products Affected

lenovo

  • gm265dn_firmware
  • g263dns_firmware
  • g263dns
  • gm265dn
  • gm266dns
  • gm266dns_firmware
CWE
CWE-20

Improper Input Validation

NVD-CWE-noinfo