CVE-2022-34886: Lenovo g263dns Firmware

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing an illegal string to the server-side interface via a script, resulting in a stack overflow.

Affected products

• Lenovo g263dns Firmware: before 02.06.00.04.00 (fixed in 02.06.00.04.00)
• Lenovo GM265DN Firmware: affected versions not specified
• Lenovo GM266DNS Firmware: before 02.06.00.04.00 (fixed in 02.06.00.04.00)

Published 2023-10-27. Last modified 2026-06-17.