CVE-2024-3286

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart by sending a specially crafted web request.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-121

Affected software

Vendor	Product	Versions
Lenovo	Printers	various
lenovo	printer	< *

References

Timeline

Published: May 16, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-328608.2Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attack CVE-2024-328617.8Under certain circumstances the impacted Software House C•CURE 9000 installer will utilize unnecessarily wide permissions.CVE-2024-328628.1Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.CVE-2024-328638.8Under certain circumstances the exacqVision Web Services may be susceptible to Cross-Site Request Forgery (CSRF)CVE-2024-328648.1Under certain circumstances exacqVision Web Services will not enforce secure web communications (HTTPS)CVE-2024-328657.3Under certain circumstances the exacqVision Server will not properly validate TLS certificates provided by connected devices.CVE-2024-328668.6Conform, a type-safe form validation library, allows the parsing of nested objects in the form of `object.property`. Due to an improper impl CVE-2024-328675.3Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0 CVE-2024-328688.1ZITADEL provides users the possibility to use Time-based One-Time-Password (TOTP) and One-Time-Password (OTP) through SMS and Email. While Z CVE-2024-328695.3Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.2.7, when using serveStatic with de CVE-2024-32875.3The SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer plugin for WordPress is vulnerable to unauthorized ld+json description inj CVE-2024-328705.8Combodo iTop is a simple, web based IT Service Management tool. Server, OS, DBMS, PHP, and iTop info (name, version and parameters) can be r