Unauthenticated Password Dump Vulnerability Affects Lenovo Printers

CVE-2024-27911

7.5HIGH

Key Information

Vendor: Lenovo
Status: Printers
Vendor: CVE Published:; 5 April 2024

Summary

A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to obtain the administrator password.

Affected Version(s)

Printers = Various

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Apr 5, 2024

Collectors

NVD DatabaseMitre Database

Credit

Lenovo thanks Jia-Ju Bai, Wen-Han Xu, Rui-Nan Hu, Dong Zhang, Cheng Li, Zhen-Yu Guan, and Jian-Wei Liu of the School of Cyber Science and Technology of Beihang University for reporting these issues.