CVE-2025-9214

Published Sep 11, 2025 CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Description
A missing authentication vulnerability was reported in some Lenovo printers that could allow a user to view limited device information or modify network settings via the CUPS service.

Remediation

Vendor Solution

Upgrade to the version (or newer) indicated in the Product Impact section below. Applicable product updates for all affected products can be downloaded from the following link: here https://www.lenovoimage.com/index.php/services/servers_drivers

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-28987 A missing authentication vulnerability was reported in some Lenovo printers that could allow a user to view limited device information or modify network settings via the CUPS service.
References
History
Type Values Removed Values Added
First Time appeared Lenovo
Lenovo printer
Vendors & Products Lenovo
Lenovo printer
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description A missing authentication vulnerability was reported in some Lenovo printers that could allow a user to view limited device information or modify network settings via the CUPS service.
Weaknesses CWE-306
References
Metrics cvssV3_1

{'score': 5.4, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
lenovo
Published
Updated
Sep 11, 2025, 6:59 PM
Reserved
Aug 19, 2025, 7:47 PM
Status
Deferred
Published
Sep 11, 2025, 7:15 PM
Modified
Oct 18, 2026, 9:10 PM