Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-9214 EUVD-2025-28987GHSA-crhp-6474-j87m

A missing authentication vulnerability was reported in some Lenovo printers that could allow a user to view limited device information or m…

Published Sep 11, 2025 · Updated Sep 11, 2025 · Assigned by lenovo

Vendor: Lenovo Product: LJ2206W Printer Product: LJ2655DN Printer Product: M7206W Printer Product: M7216NWA Printer Product: M7256WHF Printer Product: M7455DNF Printer Product: M7615DNA Product: M7626DNA Printer Product: M7628DNA Printer Product: M7675DXF Printer Product: M7685DXF Printer Product: M7686DXF

Description

A missing authentication vulnerability was reported in some Lenovo printers that could allow a user to view limited device information or modify network settings via the CUPS service.

Affected products

VendorProductAffectedFixed
Lenovo LJ2206W Printer < Ver.D(1.05) Ver.D(1.05)
Lenovo M7206W Printer < Ver.F Ver.F
Lenovo M7216NWA Printer < Ver.F Ver.F
Lenovo M7256WHF Printer < Ver.F Ver.F
Lenovo LJ2655DN Printer < Ver.E(1.06) Ver.E(1.06)
Lenovo M7615DNA < Ver.D Ver.D
Lenovo M7626DNA Printer < Ver.D Ver.D
Lenovo M7628DNA Printer < Ver.D Ver.D
Lenovo M7455DNF Printer < Ver.E Ver.E
Lenovo M7675DXF Printer < Ver.E Ver.E
Lenovo M7685DXF Printer < Ver.E Ver.E
Lenovo M7686DXF < Ver.E Ver.E

References