Description
A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing an illegal string to the server-side interface via a script, resulting in a stack overflow.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | Printer GM265DN (production date June 2022 and before) | – < 01.00.20N | 01.00.20N |
| Lenovo | Printer GM265DN (production date July 2022 and later) | – < 01.17.00.03.00 | 01.17.00.03.00 |
| Lenovo | Printer GM266DNS | – < 02.06.00.04.00 | 02.06.00.04.00 |
| Lenovo | Printer G263DNS | – < 02.06.00.04.00 | 02.06.00.04.00 |