CVE-2024-27912

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A denial of service vulnerability was reported in some Lenovo Printers that could allow an attacker to cause the device to crash by sending crafted LPD packets.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Lenovo	Printers	Various
lenovo	lingxlang_g262dn_firmware	1.00.19
lenovo	lingxlang_g336dn_firmware	1.00.20
lenovo	lingxlang_lj2320dn_firmware	1.00.10
lenovo	lj2310n_firmware	1.00.10
lenovo	lingxlang_gm265dn_firmware	1.00.26
lenovo	lingxlang_gm337dn_firmware	1.00.24

References

Timeline

Published: Apr 5, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-279136.5ospf_te_parse_te in ospfd/ospf_te.c in FRRouting (FRR) through 9.1 allows remote attackers to cause a denial of service (ospfd daemon crash)CVE-2024-279146.1GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.CVE-2024-279158.1Sulu is a PHP content management system. Starting in verson 2.2.0 and prior to version 2.4.17 and 2.5.13, access to pages is granted regardl CVE-2024-279164.3Minder is a software supply chain security platform. Prior to version 0.0.33, a Minder user can use the endpoints `GetRepositoryByName`, `De CVE-2024-279177.5Shopware is an open commerce platform based on Symfony Framework and Vue. The Symfony Session Handler pops the Session Cookie and assigns it CVE-2024-279188.2Coder allows oragnizations to provision remote development environments via Terraform. Prior to versions 2.6.1, 2.7.3, and 2.8.4, a vulnerab CVE-2024-279197.5Envoy is a cloud-native, open-source edge and service proxy. In versions 1.29.0 and 1.29.1, theEnvoy HTTP/2 protocol stack is vulnerable to CVE-2024-27926.4The Elementor Addon Elements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widgets in all versions up to, and includ CVE-2024-279207.4projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL. A significant security oversight wa CVE-2024-279218.8Grav is an open-source, flat-file content management system. A file upload path traversal vulnerability has been identified in the applicati CVE-2024-279229.8TOMP Bare Server implements the TompHTTP bare server. A vulnerability in versions prior to 2.0.2 relates to insecure handling of HTTP reques CVE-2024-279238.8Grav is a content management system (CMS). Prior to version 1.7.43, users who may write a page may use the `frontmatter` feature due to insu