Lenovo Printers vulnerabilities

11 CVEs affecting Lenovo Printers, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6004, published 2024-08-16.

More from Lenovo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-27912, published 2024-04-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A denial of service vulnerability was reported in some Lenovo Printers that could allow an attacker to cause the device to crash by sending crafted LPD packets.
• CVE-2024-27910, published 2024-04-05. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to reboot the printer without authentication.
• CVE-2024-27908, published 2024-04-05. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. A buffer overflow vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in denial of service.
• CVE-2024-27909, published 2024-04-05. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. A denial of service vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in a system reboot.
• CVE-2024-27911, published 2024-04-05. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to obtain the administrator password.
• CVE-2024-3286, published 2024-05-16. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart by sending a specially crafted web request.
• CVE-2024-4781, published 2024-08-16. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to crash printer communications until the system is rebooted.
• CVE-2024-4782, published 2024-08-16. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to disrupt the printer's functionality until a manual system…
• CVE-2024-6004, published 2024-08-16. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to deny printer connections until the system is rebooted.
• CVE-2024-5210, published 2024-08-16. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to prevent printer services from being reachable until the…

Latest

• CVE-2024-5209, published 2024-08-16. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to deny printing capabilities until the system is rebooted.