CVE-2024-3286 | THREATINT

Assigner	lenovo
Reserved	2024-04-03
Published	2024-05-16
Updated	2024-05-16

Description

A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart by sending a specially crafted web request.

HIGH: 7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Problem types

CWE-121: Stack-based Buffer Overflow

Product status

Default status

unaffected

various

affected

Credits

Lenovo thanks China Information Technology Innovation Vulnerability Database (CITIVD) and Chaitin for reporting this issue. finder

References

https://iknow.lenovo.com.cn/detail/421500

https://www.lenovoimage.com/psirt/notice/158605.html

cve.org CVE-2024-3286

nvd.nist.gov CVE-2024-3286

Download JSON