CVE-2024-27911 - Vulnerability Details - OpenCVE

A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to obtain the administrator password.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0014.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Lenovo	Lingxlang G262dn Firmware Lingxlang G336dn Firmware Lingxlang Gm265dn Firmware Lingxlang Gm337dn Firmware Lingxlang Lj2320dn Firmware Lj2310n Firmware

No data.

No data.

No data.

Fixes

Solution

Upgrade printer firmware to the version (or later) listed in the Product Impact section of LEN-148876 - https://iknow.lenovo.com.cn/detail/420425

Workaround

No workaround given by the vendor.

References

Link	Providers
https://iknow.lenovo.com.cn/detail/420425

History

No history.

MITRE

Status: PUBLISHED

Assigner: lenovo

Published: 2024-04-05T20:47:01.657Z

Updated: 2024-08-02T00:41:55.827Z

Reserved: 2024-02-27T16:12:55.968Z

Link: CVE-2024-27911

Vulnrichment

Updated: 2024-06-20T15:58:44.841Z

NVD

Status : Awaiting Analysis

Published: 2024-04-05T21:15:09.270

Modified: 2024-11-21T09:05:24.283

Link: CVE-2024-27911

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-27911", "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "state": "PUBLISHED", "assignerShortName": "lenovo", "dateReserved": "2024-02-27T16:12:55.968Z", "datePublished": "2024-04-05T20:47:01.657Z", "dateUpdated": "2024-08-02T00:41:55.827Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Printers", "vendor": "Lenovo", "versions": [{"status": "affected", "version": "Various"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Lenovo thanks Jia-Ju Bai, Wen-Han Xu, Rui-Nan Hu, Dong Zhang, Cheng Li, Zhen-Yu Guan, and Jian-Wei Liu of the School of Cyber Science and Technology of Beihang University for reporting these issues. "}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to obtain the administrator password."}], "value": "A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to obtain the administrator password."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-862", "description": "CWE-862 Missing Authorization", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo", "dateUpdated": "2024-04-05T20:47:01.657Z"}, "references": [{"url": "https://iknow.lenovo.com.cn/detail/420425"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Upgrade printer firmware to the version (or later) listed in the Product Impact section of LEN-148876 - <a target=\"_blank\" rel=\"nofollow\" href=\"https://iknow.lenovo.com.cn/detail/420425\">https://iknow.lenovo.com.cn/detail/420425</a>"}], "value": "Upgrade printer firmware to the version (or later) listed in the Product Impact section of LEN-148876 - https://iknow.lenovo.com.cn/detail/420425 "}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"affected": [{"vendor": "lenovo", "product": "lingxlang_g262dn_firmware", "cpes": ["cpe:2.3:o:lenovo:lingxlang_g262dn_firmware:1.00.19:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "1.00.19", "status": "affected"}]}, {"vendor": "lenovo", "product": "lingxlang_g336dn_firmware", "cpes": ["cpe:2.3:o:lenovo:lingxlang_g336dn_firmware:1.00.20:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "1.00.20", "status": "affected"}]}, {"vendor": "lenovo", "product": "lingxlang_lj2320dn_firmware", "cpes": ["cpe:2.3:o:lenovo:lingxlang_lj2320dn_firmware:1.00.10:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "1.00.10", "status": "affected"}]}, {"vendor": "lenovo", "product": "lj2310n_firmware", "cpes": ["cpe:2.3:o:lenovo:lj2310n_firmware:1.00.10:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "1.00.10", "status": "affected"}]}, {"vendor": "lenovo", "product": "lingxlang_gm265dn_firmware", "cpes": ["cpe:2.3:o:lenovo:lingxlang_gm265dn_firmware:1.00.26:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "1.00.26", "status": "affected"}]}, {"vendor": "lenovo", "product": "lingxlang_gm337dn_firmware", "cpes": ["cpe:2.3:o:lenovo:lingxlang_gm337dn_firmware:1.00.24:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "1.00.24", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-20T15:59:01.135627Z", "id": "CVE-2024-27911", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-20T15:59:08.416Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:41:55.827Z"}, "title": "CVE Program Container", "references": [{"url": "https://iknow.lenovo.com.cn/detail/420425", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-27911", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-20T15:59:01.135627Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:lenovo:lingxlang_g262dn_firmware:1.00.19:*:*:*:*:*:*:*"], "vendor": "lenovo", "product": "lingxlang_g262dn_firmware", "versions": [{"status": "affected", "version": "1.00.19"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:lenovo:lingxlang_g336dn_firmware:1.00.20:*:*:*:*:*:*:*"], "vendor": "lenovo", "product": "lingxlang_g336dn_firmware", "versions": [{"status": "affected", "version": "1.00.20"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:lenovo:lingxlang_lj2320dn_firmware:1.00.10:*:*:*:*:*:*:*"], "vendor": "lenovo", "product": "lingxlang_lj2320dn_firmware", "versions": [{"status": "affected", "version": "1.00.10"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:lenovo:lj2310n_firmware:1.00.10:*:*:*:*:*:*:*"], "vendor": "lenovo", "product": "lj2310n_firmware", "versions": [{"status": "affected", "version": "1.00.10"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:lenovo:lingxlang_gm265dn_firmware:1.00.26:*:*:*:*:*:*:*"], "vendor": "lenovo", "product": "lingxlang_gm265dn_firmware", "versions": [{"status": "affected", "version": "1.00.26"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:lenovo:lingxlang_gm337dn_firmware:1.00.24:*:*:*:*:*:*:*"], "vendor": "lenovo", "product": "lingxlang_gm337dn_firmware", "versions": [{"status": "affected", "version": "1.00.24"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-20T15:58:44.841Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Lenovo thanks Jia-Ju Bai, Wen-Han Xu, Rui-Nan Hu, Dong Zhang, Cheng Li, Zhen-Yu Guan, and Jian-Wei Liu of the School of Cyber Science and Technology of Beihang University for reporting these issues. "}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Lenovo", "product": "Printers", "versions": [{"status": "affected", "version": "Various"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Upgrade printer firmware to the version (or later) listed in the Product Impact section of LEN-148876 - https://iknow.lenovo.com.cn/detail/420425 ", "supportingMedia": [{"type": "text/html", "value": "Upgrade printer firmware to the version (or later) listed in the Product Impact section of LEN-148876 - <a target=\"_blank\" rel=\"nofollow\" href=\"https://iknow.lenovo.com.cn/detail/420425\">https://iknow.lenovo.com.cn/detail/420425</a>", "base64": false}]}], "references": [{"url": "https://iknow.lenovo.com.cn/detail/420425"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to obtain the administrator password.", "supportingMedia": [{"type": "text/html", "value": "A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to obtain the administrator password.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo", "dateUpdated": "2024-04-05T20:47:01.657Z"}}}, "cveMetadata": {"cveId": "CVE-2024-27911", "state": "PUBLISHED", "dateUpdated": "2024-06-20T15:59:08.416Z", "dateReserved": "2024-02-27T16:12:55.968Z", "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "datePublished": "2024-04-05T20:47:01.657Z", "assignerShortName": "lenovo"}, "dataVersion": "5.1"}