Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
142 vulnerabilities by lexmark
CVE-2025-65081 (GCVE-0-2025-65081)
Vulnerability from nvd – Published: 2026-02-03 20:39 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Out-of-bounds read vulnerability in Postscript interpreter
Summary
An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.506
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65081",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-04T04:56:08.400670Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:23.914Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.506",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-153",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-153 Input Data Manipulation"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:39:14.501Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Out-of-bounds read vulnerability in Postscript interpreter",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65081",
"datePublished": "2026-02-03T20:39:14.501Z",
"dateReserved": "2025-11-17T13:56:38.589Z",
"dateUpdated": "2026-02-26T15:04:23.914Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65080 (GCVE-0-2025-65080)
Vulnerability from nvd – Published: 2026-02-03 20:35 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Type confusion vulnerability in Postscript interpreter
Summary
A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.506
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65080",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-04T04:56:07.187232Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:24.195Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.506",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-153",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-153 Input Data Manipulation"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-843",
"description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:35:54.592Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Type confusion vulnerability in Postscript interpreter",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65080",
"datePublished": "2026-02-03T20:35:54.592Z",
"dateReserved": "2025-11-17T13:56:38.589Z",
"dateUpdated": "2026-02-26T15:04:24.195Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65079 (GCVE-0-2025-65079)
Vulnerability from nvd – Published: 2026-02-03 20:23 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Heap-based buffer overflow vulnerability in Postscript interpreter
Summary
A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.506
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65079",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-04T04:56:06.044346Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:24.490Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.506",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:23:24.405Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Heap-based buffer overflow vulnerability in Postscript interpreter",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65079",
"datePublished": "2026-02-03T20:23:24.405Z",
"dateReserved": "2025-11-17T13:56:38.589Z",
"dateUpdated": "2026-02-26T15:04:24.490Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65078 (GCVE-0-2025-65078)
Vulnerability from nvd – Published: 2026-02-03 20:51 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Untrusted search path vulnerability in Embedded Solutions Framework
Summary
An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-426 - Untrusted Search Path
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.507
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65078",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-06T04:55:26.714128Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:23.262Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.507",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code."
}
],
"value": "An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-38",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-38 Leveraging/Manipulating Configuration File Search Paths"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-426",
"description": "CWE-426 Untrusted Search Path",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:51:20.556Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Untrusted search path vulnerability in Embedded Solutions Framework",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65078",
"datePublished": "2026-02-03T20:51:20.556Z",
"dateReserved": "2025-11-17T13:56:38.588Z",
"dateUpdated": "2026-02-26T15:04:23.262Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65077 (GCVE-0-2025-65077)
Vulnerability from nvd – Published: 2026-02-03 20:44 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Relative path traversal vulnerability in Embedded Solutions Framework
Summary
A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.507
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65077",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-06T04:55:27.610829Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:23.610Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.507",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-139",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-139 Relative Path Traversal"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:44:32.330Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Relative path traversal vulnerability in Embedded Solutions Framework",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65077",
"datePublished": "2026-02-03T20:44:32.330Z",
"dateReserved": "2025-11-17T13:56:38.587Z",
"dateUpdated": "2026-02-26T15:04:23.610Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-9269 (GCVE-0-2025-9269)
Vulnerability from nvd – Published: 2025-09-09 17:21 – Updated: 2025-09-29 15:34
VLAI
EPSS
VEX
Title
Server-Side Request Forgery (SSRF) vulnerability found in embedded web server
Summary
A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-918 - Server-Side Request Forgery (SSRF)
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. |
Affected:
0 , ≤ CXTLS.250.199
(custom)
Affected: 0 , ≤ MXTLS.250.199 (custom) Affected: 0 , ≤ CSTLS.250.199 (custom) Affected: 0 , ≤ MSNSN.250.199 (custom) Affected: 0 , ≤ MSTSN.250.199 (custom) Affected: 0 , ≤ MXTSN.250.199 (custom) Affected: 0 , ≤ CSNGV.250.199 (custom) Affected: 0 , ≤ CSTGV.250.199 (custom) Affected: 0 , ≤ CXTGV.250.199 (custom) Affected: 0 , ≤ CXTPC.250.199 (custom) Affected: 0 , ≤ CSTPC.250.199 (custom) Affected: 0 , ≤ MXTCT.250.199 (custom) Affected: 0 , ≤ MXTPM.250.199 (custom) Affected: 0 , ≤ CXTMM.250.199 (custom) Affected: 0 , ≤ CSTMM.250.199 (custom) Affected: 0 , ≤ MSNGM.250.199 (custom) Affected: 0 , ≤ MSTGM.250.199 (custom) Affected: 0 , ≤ MXNGM.250.199 (custom) Affected: 0 , ≤ MXTGM.250.199 (custom) Affected: 0 , ≤ MSNGW.250.199 (custom) Affected: 0 , ≤ MSTGW.250.199 (custom) Affected: 0 , ≤ MXTGW.250.199 (custom) Affected: 0 , ≤ CSTZJ.250.199 (custom) Affected: 0 , ≤ CSNZJ.250.199 (custom) Affected: 0 , ≤ CXTZJ.250.199 (custom) Affected: 0 , ≤ CXNZJ.250.199 (custom) Affected: 0 , ≤ MSLSG.230.466 (custom) Affected: 0 , ≤ MXLSG.230.466 (custom) Affected: 0 , ≤ MSLBD.230.466 (custom) Affected: 0 , ≤ MXLBD.230.466 (custom) Affected: 0 , ≤ CSLBN.230.466 (custom) Affected: 0 , ≤ CSLBL.230.466 (custom) Affected: 0 , ≤ CXLBN.230.466 (custom) Affected: 0 , ≤ CXLBL.230.466 (custom) Affected: 0 , ≤ CXTPP.230.466 (custom) Affected: 0 , ≤ CSTPP.230.466 (custom) Affected: 0 , ≤ CSTAT.230.466 (custom) Affected: 0 , ≤ CXTAT.230.466 (custom) Affected: 0 , ≤ CSTMH.230.466 (custom) Affected: 0 , ≤ CXTMH.230.466 (custom) Affected: 0 , ≤ LW90.TL2.P224 (custom) Affected: 0 , ≤ LW90.PR2.P224 (custom) Affected: 0 , ≤ LW90.PR4.P224 (custom) Affected: 0 , ≤ LW90.SB4.P224 (custom) Affected: 0 , ≤ LW90.SB7.P224 (custom) Affected: 0 , ≤ LW90.DN2.P224 (custom) Affected: 0 , ≤ LW90.DN4.P224 (custom) Affected: 0 , ≤ LW90.DN7.P224 (custom) Affected: 0 , ≤ LW90.TU.P224 (custom) Affected: 0 , ≤ LW90.SA.P224 (custom) Affected: 0 , ≤ LW90.MG.P224 (custom) Affected: 0 , ≤ LW90.GM7.P224 (custom) Affected: 0 , ≤ LW90.GM4.P224 (custom) Affected: 0 , ≤ LW90.VY4.P224 (custom) Affected: 0 , ≤ LW80.PRL.P260 (custom) Affected: 0 , ≤ LW80.SB2.P260 (custom) Affected: 0 , ≤ LW80.VYL.P260 (custom) Affected: 0 , ≤ LW80.VY2.P260 (custom) Affected: 0 , ≤ LW80.GM2.P260 (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-9269",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-09-09T17:43:57.556819Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-09-09T18:36:21.085Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"webserver"
],
"product": "CX, XC, CS, MS, MX, XM, et. al.",
"vendor": "Lexmark",
"versions": [
{
"changes": [
{
"at": "CXTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPC.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPC.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPC.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPC.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTCT.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTCT.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTPM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTPM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXNGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXNGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXNZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXNZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLSG.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLSG.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLSG.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLSG.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLBD.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLBD.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLBD.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLBD.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBN.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBN.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBL.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBL.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBN.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBN.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBL.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBL.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPP.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPP.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPP.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPP.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTAT.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTAT.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTAT.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTAT.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMH.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMH.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMH.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMH.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TL2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TL2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TU.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TU.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SA.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SA.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.MG.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.MG.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.VY4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.VY4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.PRL.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.PRL.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.SB2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.SB2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VYL.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VYL.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VY2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VY2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.GM2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.GM2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server.\u0026nbsp;Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device."
}
],
"value": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server.\u00a0Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device."
}
],
"impacts": [
{
"capecId": "CAPEC-101",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-101 Server Side Include (SSI) Injection"
}
]
},
{
"capecId": "CAPEC-33",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-33: HTTP Request Smuggling"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918: Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-09-29T15:34:06.094Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Server-Side Request Forgery (SSRF) vulnerability found in embedded web server",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-9269",
"datePublished": "2025-09-09T17:21:36.589Z",
"dateReserved": "2025-08-20T15:10:24.655Z",
"dateUpdated": "2025-09-29T15:34:06.094Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-4046 (GCVE-0-2025-4046)
Vulnerability from nvd – Published: 2025-08-19 13:12 – Updated: 2026-02-26 17:48
VLAI
EPSS
VEX
Title
Missing Authorization in Lexmark Cloud Services badge management
Summary
A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization
Severity
8.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | Lexmark Cloud Services |
Affected:
0
|
Date Public
2025-08-18 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-4046",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-20T03:56:05.961084Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T17:48:28.920Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Lexmark Cloud Services",
"vendor": "Lexmark",
"versions": [
{
"status": "affected",
"version": "0"
}
]
}
],
"datePublic": "2025-08-18T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ch4\u003e\n\n\u003c/h4\u003e\u003ch4\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization\u003c/span\u003e\u003c/h4\u003e\n\n\u003cbr\u003e"
}
],
"value": "A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization"
}
],
"impacts": [
{
"capecId": "CAPEC-58",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-58: Restful Privilege Elevation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-19T13:12:28.574Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Missing Authorization in Lexmark Cloud Services badge management",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-4046",
"datePublished": "2025-08-19T13:12:28.574Z",
"dateReserved": "2025-04-28T17:55:12.343Z",
"dateUpdated": "2026-02-26T17:48:28.920Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-4044 (GCVE-0-2025-4044)
Vulnerability from nvd – Published: 2025-08-19 13:12 – Updated: 2026-02-26 17:48
VLAI
EPSS
VEX
Title
XML External Entity Injection vulnerability in various Lexmark Universal Drivers
Summary
Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.
Severity
8.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-611 - Improper Restriction of XML External Entity Reference
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | Universal Print Driver |
Affected:
0 , < 3.0.6.0
(custom)
|
|
| Lexmark | Printer Software G2 |
Affected:
0 , < 2.17.0.0
(custom)
|
Date Public
2025-08-18 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-4044",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-20T03:56:04.854966Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T17:48:29.270Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Universal Print Driver",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "3.0.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Printer Software G2",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "2.17.0.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"datePublic": "2025-08-18T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.\u003cbr\u003e"
}
],
"value": "Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL."
}
],
"impacts": [
{
"capecId": "CAPEC-221",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-221 Data Serialization External Entities Blowup"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-611",
"description": "CWE-611 Improper Restriction of XML External Entity Reference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-19T13:12:09.782Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "XML External Entity Injection vulnerability in various Lexmark Universal Drivers",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-4044",
"datePublished": "2025-08-19T13:12:09.782Z",
"dateReserved": "2025-04-28T17:54:55.187Z",
"dateUpdated": "2026-02-26T17:48:29.270Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-1127 (GCVE-0-2025-1127)
Vulnerability from nvd – Published: 2025-02-13 18:49 – Updated: 2025-02-13 19:14
VLAI
EPSS
VEX
Title
Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server
Summary
The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.
Severity
9.1 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. |
Affected:
0 , ≤ CXTLS.240.205
(custom)
Affected: 0 , ≤ MXTLS.240.205 (custom) Affected: 0 , ≤ CSTLS.240.205 (custom) Affected: 0 , ≤ MSNSN.240.205 (custom) Affected: 0 , ≤ MSTSN.240.205 (custom) Affected: 0 , ≤ MXTSN.240.205 (custom) Affected: 0 , ≤ CSNGV.240.205 (custom) Affected: 0 , ≤ CSTGV.240.205 (custom) Affected: 0 , ≤ CXTGV.240.205 (custom) Affected: 0 , ≤ CXTPC.240.205 (custom) Affected: 0 , ≤ CSTPC.240.205 (custom) Affected: 0 , ≤ MXTCT.240.205 (custom) Affected: 0 , ≤ MXTPM.240.205 (custom) Affected: 0 , ≤ CXTMM.240.205 (custom) Affected: 0 , ≤ CSTMM.240.205 (custom) Affected: 0 , ≤ MSNGM.240.205 (custom) Affected: 0 , ≤ MSTGM.240.205 (custom) Affected: 0 , ≤ MXNGM.240.205 (custom) Affected: 0 , ≤ MXTGM.240.205 (custom) Affected: 0 , ≤ MSNGW.240.205 (custom) Affected: 0 , ≤ MSTGW.240.205 (custom) Affected: 0 , ≤ MXTGW.240.205 (custom) Affected: 0 , ≤ CSTZJ.240.205 (custom) Affected: 0 , ≤ CSNZJ.240.205 (custom) Affected: 0 , ≤ CXTZJ.240.205 (custom) Affected: 0 , ≤ CXNZJ.240.205 (custom) Affected: 0 , ≤ MSLSG.240.407 (custom) Affected: 0 , ≤ MXLSG.240.407 (custom) Affected: 0 , ≤ MSLBD.240.407 (custom) Affected: 0 , ≤ MXLBD.240.407 (custom) Affected: 0 , ≤ CSLBN.240.407 (custom) Affected: 0 , ≤ CSLBL.240.407 (custom) Affected: 0 , ≤ CXLBN.240.407 (custom) Affected: 0 , ≤ CXLBL.240.407 (custom) Affected: 0 , ≤ CXTPP.240.407 (custom) Affected: 0 , ≤ CSTPP.240.407 (custom) Affected: 0 , ≤ CSTAT.240.407 (custom) Affected: 0 , ≤ CXTAT.240.407 (custom) Affected: 0 , ≤ CSTMH.240.407 (custom) Affected: 0 , ≤ CXTMH.240.407 (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-1127",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-13T19:14:28.287539Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-13T19:14:43.391Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"webserver"
],
"product": "CX, XC, CS, MS, MX, XM, et. al.",
"vendor": "Lexmark",
"versions": [
{
"changes": [
{
"at": "CXTLS.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTLS.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTLS.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTLS.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTLS.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTLS.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNSN.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNSN.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTSN.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTSN.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTSN.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTSN.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNGV.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNGV.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTGV.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTGV.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTGV.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTGV.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPC.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPC.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPC.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPC.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTCT.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTCT.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTPM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTPM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXNGM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXNGM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGW.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGW.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGW.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGW.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGW.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGW.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTZJ.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTZJ.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNZJ.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNZJ.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTZJ.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTZJ.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXNZJ.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXNZJ.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLSG.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLSG.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLSG.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLSG.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLBD.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLBD.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLBD.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLBD.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBN.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBN.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBL.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBL.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBN.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBN.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBL.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBL.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPP.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPP.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPP.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPP.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTAT.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTAT.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTAT.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTAT.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMH.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMH.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMH.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMH.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.\n\n\u003cp\u003e\u003c/p\u003e"
}
],
"value": "The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem."
}
],
"impacts": [
{
"capecId": "CAPEC-123",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-123 Buffer Manipulation"
}
]
},
{
"capecId": "CAPEC-124",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-124 Shared Resource Manipulation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-362",
"description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-02-13T18:49:43.500Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-1127",
"datePublished": "2025-02-13T18:49:43.500Z",
"dateReserved": "2025-02-07T21:52:05.399Z",
"dateUpdated": "2025-02-13T19:14:43.391Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-11344 (GCVE-0-2024-11344)
Vulnerability from nvd – Published: 2025-02-13 18:51 – Updated: 2025-02-13 19:19
VLAI
EPSS
VEX
Title
Type confusion vulnerability in the Postscript interpreter in various Lexmark devices
Summary
A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
Severity
7.3 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. |
Affected:
0 , ≤ CXTLS.240.076
(custom)
Affected: CXTLS.240.200 , < * (custom) Affected: 0 , ≤ MXTLS.240.076 (custom) Affected: MXTLS.240.200 , < * (custom) Affected: 0 , ≤ CSTLS.240.076 (custom) Affected: CSTLS.240.200 , < * (custom) Affected: 0 , ≤ MSNSN.240.042 (custom) Affected: MSNSN.240.200 , < * (custom) Affected: 0 , ≤ MSTSN.240.042 (custom) Affected: MSTSN.240.200 , < * (custom) Affected: 0 , ≤ MXTSN.240.042 (custom) Affected: MXTSN.240.200 , < * (custom) Affected: 0 , ≤ CSNGV.240.042 (custom) Affected: CSNGV.240.200 , < * (custom) Affected: 0 , ≤ CSTGV.240.042 (custom) Affected: CSTGV.240.200 , < * (custom) Affected: 0 , ≤ CXTGV.240.042 (custom) Affected: CXTGV.240.200 , < * (custom) Affected: 0 , ≤ CXTPC.240.042 (custom) Affected: CXTPC.240.200 , < * (custom) Affected: 0 , ≤ CSTPC.240.042 (custom) Affected: CSTPC.240.200 , < * (custom) Affected: 0 , ≤ MXTCT.240.042 (custom) Affected: MXTCT.240.200 , < * (custom) Affected: 0 , ≤ MXTPM.240.042 (custom) Affected: MXTPM.240.200 , < * (custom) Affected: 0 , ≤ CXTMM.240.042 (custom) Affected: CXTMM.240.200 , < * (custom) Affected: 0 , ≤ CSTMM.240.042 (custom) Affected: CSTMM.240.200 , < * (custom) Affected: 0 , ≤ CSTZJ.240.042 (custom) Affected: CSTZJ.240.200 , < * (custom) Affected: 0 , ≤ CSNZJ.240.042 (custom) Affected: CSNZJ.240.200 , < * (custom) Affected: 0 , ≤ CXTZJ.240.042 (custom) Affected: CXTZJ.240.200 , < * (custom) Affected: 0 , ≤ CXNZJ.240.042 (custom) Affected: CXNZJ.240.200 , < * (custom) Affected: 0 , ≤ MSNGM.240.042 (custom) Affected: MSNGM.240.200 , < * (custom) Affected: 0 , ≤ MSTGM.240.042 (custom) Affected: MSTGM.240.200 , < * (custom) Affected: 0 , ≤ MXNGM.240.042 (custom) Affected: MXNGM.240.200 , < * (custom) Affected: 0 , ≤ MXTGM.240.042 (custom) Affected: MXTGM.240.200 , < * (custom) Affected: 0 , ≤ MSNGW.240.042 (custom) Affected: MSNGW.240.200 , < * (custom) Affected: 0 , ≤ MSTGW.240.042 (custom) Affected: MSTGW.240.200 , < * (custom) Affected: 0 , ≤ MXTGW.240.042 (custom) Affected: MXTGW.240.200 , < * (custom) Affected: 0 , ≤ MSLSG.230.401 (custom) Affected: 0 , ≤ MXLSG.230.401 (custom) Affected: 0 , ≤ MSLBD.230.401 (custom) Affected: 0 , ≤ MXLBD.230.401 (custom) Affected: 0 , ≤ CSLBN.230.401 (custom) Affected: 0 , ≤ CSLBL.230.401 (custom) Affected: 0 , ≤ CXLBN.230.401 (custom) Affected: 0 , ≤ CXLBL.230.401 (custom) Affected: 0 , ≤ CXTPP.230.401 (custom) Affected: 0 , ≤ CSTPP.230.401 (custom) Affected: 0 , ≤ CSTAT.230.401 (custom) Affected: 0 , ≤ CXTAT.230.401 (custom) Affected: 0 , ≤ CSTMH.230.401 (custom) Affected: 0 , ≤ CXTMH.230.401 (custom) Affected: 0 , ≤ LW90.TL2.P215 (custom) Affected: 0 , ≤ LW90.PR2.P215 (custom) Affected: 0 , ≤ LW90.PR4.P215 (custom) Affected: 0 , ≤ LW90.SB4.P215 (custom) Affected: 0 , ≤ LW90.SB7.P215 (custom) Affected: 0 , ≤ LW90.DN2.P215 (custom) Affected: 0 , ≤ LW90.DN4.P215 (custom) Affected: 0 , ≤ LW90.DN7.P215 (custom) Affected: 0 , ≤ LW90.TU.P215 (custom) Affected: 0 , ≤ LW90.SA.P215 (custom) Affected: 0 , ≤ LW90.MG.P215 (custom) Affected: 0 , ≤ LW90.GM7.P215 (custom) Affected: 0 , ≤ LW90.GM4.P215 (custom) Affected: 0 , ≤ LW90.VY4.P215 (custom) Affected: 0 , ≤ LW80.PRL.P257 (custom) Affected: 0 , ≤ LW80.SB2.P257 (custom) Affected: 0 , ≤ LW80.VYL.P257 (custom) Affected: 0 , ≤ LW80.VY2.P257 (custom) Affected: 0 , ≤ LW80.GM2.P257 (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11344",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-13T19:16:46.776468Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-13T19:19:11.784Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "CX, XC, CS, MS, MX, XM, et. al.",
"vendor": "Lexmark",
"versions": [
{
"changes": [
{
"at": "CXTLS.240.077 - CXTLS.240.199",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTLS.240.076",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTLS.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTLS.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTLS.240.077 - MXTLS.240.199",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTLS.240.076",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTLS.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTLS.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTLS.240.077 - CSTLS.240.199",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTLS.240.076",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTLS.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTLS.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNSN.240.043 - MSNSN.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNSN.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNSN.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSNSN.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTSN.240.043 - MSTSN.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTSN.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTSN.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSTSN.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTSN.240.043 - MXTSN.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTSN.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTSN.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTSN.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNGV.240.043 - CSNGV.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNGV.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNGV.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSNGV.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTGV.240.043 - CSTGV.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTGV.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTGV.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTGV.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTGV.240.043 - CXTGV.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTGV.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTGV.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTGV.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPC.240.043 - CXTPC.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPC.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPC.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTPC.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPC.240.043 - CSTPC.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPC.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPC.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTPC.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTCT.240.043 - MXTCT.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTCT.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTCT.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTCT.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTPM.240.043-MXTPM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTPM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTPM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTPM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMM.240.043-CXTMM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTMM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMM.240.043 - CSTMM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTMM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTZJ.240.043 - CSTZJ.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTZJ.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTZJ.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTZJ.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNZJ.240.043 - CSNZJ.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNZJ.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNZJ.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSNZJ.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTZJ.240.043 - CXTZJ.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTZJ.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTZJ.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTZJ.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXNZJ.240.043 - CXNZJ.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXNZJ.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXNZJ.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXNZJ.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGM.240.043 - MSNGM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSNGM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGM.240.043 - MSTGM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSTGM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXNGM.240.043 - MXNGM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXNGM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXNGM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXNGM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGM.240.043 - MXTGM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTGM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGW.240.043 - MSNGW.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGW.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGW.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSNGW.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGW.240.043 - MSTGW.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGW.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGW.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSTGW.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGW.240.043 - MXTGW.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGW.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGW.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTGW.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLSG.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLSG.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLSG.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLSG.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLBD.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLBD.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLBD.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLBD.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBN.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBN.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBL.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBL.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBN.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBN.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBL.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBL.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPP.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPP.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPP.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPP.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTAT.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTAT.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTAT.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTAT.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMH.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMH.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMH.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMH.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TL2.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TL2.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR2.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR2.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB7.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB7.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN2.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN2.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN7.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN7.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TU.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TU.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SA.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SA.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.MG.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.MG.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM7.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM7.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.VY4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.VY4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.PRL.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.PRL.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.SB2.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.SB2.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VYL.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VYL.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VY2.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VY2.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.GM2.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.GM2.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.\u003cbr\u003e\u003c/p\u003e"
}
],
"value": "A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code."
}
],
"impacts": [
{
"capecId": "CAPEC-123",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-123 Buffer Manipulation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-843",
"description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-02-13T18:53:16.828Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Type confusion vulnerability in the Postscript interpreter in various Lexmark devices",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2024-11344",
"datePublished": "2025-02-13T18:51:23.777Z",
"dateReserved": "2024-11-18T16:10:34.720Z",
"dateUpdated": "2025-02-13T19:19:11.784Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-1126 (GCVE-0-2025-1126)
Vulnerability from nvd – Published: 2025-02-11 16:50 – Updated: 2025-02-12 20:51
VLAI
EPSS
VEX
Title
Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC).
Summary
A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client.
Severity
9.3 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | Lexmark Print Management Client |
Affected:
3.0.0 , < 3.5.0
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-1126",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-11T17:04:45.524278Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-12T20:51:45.122Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Lexmark Print Management Client",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "3.5.0",
"status": "affected",
"version": "3.0.0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client."
}
],
"value": "A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client."
}
],
"impacts": [
{
"capecId": "CAPEC-153",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-153 Input Data Manipulation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-807",
"description": "CWE-807",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-02-11T16:57:18.291Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC).",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends updating the LPMC version if affected.\u003cbr\u003e"
}
],
"value": "Lexmark recommends updating the LPMC version if affected."
}
],
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-1126",
"datePublished": "2025-02-11T16:50:34.270Z",
"dateReserved": "2025-02-07T21:20:13.715Z",
"dateUpdated": "2025-02-12T20:51:45.122Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50733 (GCVE-0-2023-50733)
Vulnerability from nvd – Published: 2025-01-21 22:03 – Updated: 2025-01-22 18:43
VLAI
EPSS
VEX
Title
A Server-Side Request Forgery (SSRF) vulnerability exists in newer Lexmark devices.
Summary
A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer
Lexmark devices.
Severity
8.6 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.lexmark.com/en_us/solutions/security/… | vendor-advisory |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50733",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-22T18:43:06.465309Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-22T18:43:36.163Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "various",
"vendor": "Lexmark",
"versions": [
{
"lessThanOrEqual": "230.211",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer\nLexmark devices."
}
],
"value": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer\nLexmark devices."
}
],
"impacts": [
{
"capecId": "CAPEC-664",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-664 Server Side Request Forgery"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918 Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20 Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-21T22:03:28.688Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "A Server-Side Request Forgery (SSRF) vulnerability exists in newer Lexmark devices.",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2023-50733",
"datePublished": "2025-01-21T22:03:28.688Z",
"dateReserved": "2023-12-11T20:00:38.335Z",
"dateUpdated": "2025-01-22T18:43:36.163Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50739 (GCVE-0-2023-50739)
Vulnerability from nvd – Published: 2025-01-17 23:47 – Updated: 2025-01-22 14:23
VLAI
EPSS
VEX
Title
A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.
Summary
A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | Printer Firmware |
Affected:
0 , ≤ 230.209
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50739",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-22T14:22:31.707775Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-22T14:23:31.226Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Printer Firmware",
"vendor": "Lexmark",
"versions": [
{
"lessThanOrEqual": "230.209",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A\u0026nbsp;buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark\u0026nbsp;devices. The vulnerability can be leveraged by an attacker to execute arbitrary code."
}
],
"value": "A\u00a0buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark\u00a0devices. The vulnerability can be leveraged by an attacker to execute arbitrary code."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "Successful exploitation of this vulnerability can lead to an attacker being able to remotely execute arbitrary code on a device."
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-17T23:47:13.923Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2023-50739",
"datePublished": "2025-01-17T23:47:13.923Z",
"dateReserved": "2023-12-11T20:00:38.337Z",
"dateUpdated": "2025-01-22T14:23:31.226Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50738 (GCVE-0-2023-50738)
Vulnerability from nvd – Published: 2025-01-17 21:10 – Updated: 2025-01-17 22:02
VLAI
EPSS
VEX
Title
A firmware downgrade prevention vulnerability has been identified in newer Lexmark devices.
Summary
A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to
override this downgrade protection has been identified.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | Printer Firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.086 (custom) Affected: 230.100 , ≤ 230.104 (custom) Affected: 230.200 , ≤ 230.209 (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50738",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-17T22:02:51.732818Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-17T22:02:59.237Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Printer Firmware",
"vendor": "Lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.086",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.104",
"status": "affected",
"version": "230.100",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.209",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A\u0026nbsp;new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to \noverride this downgrade protection has been identified."
}
],
"value": "A\u00a0new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to \noverride this downgrade protection has been identified."
}
],
"impacts": [
{
"capecId": "CAPEC-21",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-21 Exploitation of Trusted Identifiers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-354",
"description": "CWE-354 Improper Validation of Integrity Check Value",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-1328",
"description": "CWE-1328 Security Version Number Mutable to Older Versions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-17T21:27:34.693Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "A firmware downgrade prevention vulnerability has been identified in newer Lexmark devices.",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2023-50738",
"datePublished": "2025-01-17T21:10:44.220Z",
"dateReserved": "2023-12-11T20:00:38.337Z",
"dateUpdated": "2025-01-17T22:02:59.237Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50737 (GCVE-0-2023-50737)
Vulnerability from nvd – Published: 2024-02-28 02:38 – Updated: 2024-08-23 14:56
VLAI
EPSS
VEX
Title
An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.
Summary
The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.
Severity
9.1 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.lexmark.com/en_us/solutions/security/… | vendor-advisory |
Impacted products
68 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | various |
Affected:
various
|
|
| lexmark | cxtpc_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstpc_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxtct_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxtpm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtmm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mslsg_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxlsg_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mslbd_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxlbd_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | msngm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mstgm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mstgm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxngm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | ms315 |
Affected:
0 , ≤ lw90.tl2.p205
(custom)
cpe:2.3:h:lexmark:ms417:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms415:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms315:-:*:*:*:*:*:*:* |
|
| lexmark | ms610dn |
Affected:
0 , ≤ lw90.pr2.p205
(custom)
cpe:2.3:h:lexmark:m3150dn:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:m1145:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:m1140\+:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms617:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms517:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms510:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms610dn:-:*:*:*:*:*:*:* |
|
| lexmark | mxtgm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | msngw_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mstgw_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxtgw_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cslbn_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cslbl_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxlbn_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxlbl_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstzj_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | csnzj_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtzj_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxnzj_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxnzj_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtpp_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstpp_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstpp_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstat_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstat_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtat_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtat_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstmh_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstmh_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtmh_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtmh_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | msnsn_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:msnsn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mstsn_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mstsn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cx410 |
Affected:
0 , ≤ lw90.gm4.p205
(custom)
cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:* |
|
| lexmark | mxtsn_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtsn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | csngv_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:csngv_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstgv_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstgv_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtgv_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtgv_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | ms610de |
Affected:
0 , ≤ lw90.pr4.p205
(custom)
cpe:2.3:h:lexmark:m3150de:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms610de:-:*:*:*:*:*:*:* |
|
| lexmark | mx410 |
Affected:
0 , ≤ lw90.sb4.p205
(custom)
cpe:2.3:h:lexmark:xm1145:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm1140:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx517:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx511:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx510:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx417:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx410:-:*:*:*:*:*:*:* |
|
| lexmark | mx610 |
Affected:
0 , ≤ lw90.sb7.p205
(custom)
cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:* |
|
| lexmark | ms711 |
Affected:
0 , ≤ lw90.dn2.p205
(custom)
cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:* |
|
| lexmark | ms810de |
Affected:
0 , ≤ lw90.dn4.p205
(custom)
cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:* |
|
| lexmark | ms812de |
Affected:
0 , ≤ lw90.dn7.p205
(custom)
cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:* |
|
| lexmark | mx710 |
Affected:
0 , ≤ lw90.tu.p205
(custom)
cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:* |
|
| lexmark | ms911 |
Affected:
0 , ≤ lw90.sa.p205
(custom)
cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:* |
|
| lexmark | mx910 |
Affected:
0 , ≤ lw90.mg.p205
(custom)
cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:* |
|
| lexmark | mx6500e |
Affected:
0 , ≤ lw90.jd.p205
(custom)
cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:* |
|
| lexmark | cs510 |
Affected:
0 , ≤ lw90.vy4.p205
(custom)
cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:* |
|
| lexmark | cx510 |
Affected:
0 , ≤ lw90.gm7.p205
(custom)
cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:* |
|
| lexmark | ms310 |
Affected:
0 , ≤ lw80.prl.p249
(custom)
cpe:2.3:h:lexmark:m1140:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms410:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms317:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms312:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms310:-:*:*:*:*:*:*:* |
|
| lexmark | mx310 |
Affected:
0 , ≤ lw80.sb2.p249
(custom)
cpe:2.3:h:lexmark:xm1135:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx317:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx310:-:*:*:*:*:*:*:* |
|
| lexmark | cs310 |
Affected:
0 , ≤ lw80.vyl.p249
(custom)
cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:* |
|
| lexmark | cs410 |
Affected:
0 , ≤ lw80.vy2.p249
(custom)
cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:* |
|
| lexmark | cx310 |
Affected:
0 , ≤ lw80.gm2.p249
(custom)
cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:* |
|
| lexmark | c746 |
Affected:
0 , ≤ lhs60.cm2.p763
(custom)
cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:* |
|
| lexmark | c748 |
Affected:
0 , ≤ lhs60.cm4.p763
(custom)
cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:* |
|
| lexmark | c792 |
Affected:
0 , ≤ lhs60.hc.p763
(custom)
cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:* |
|
| lexmark | c925 |
Affected:
0 , ≤ lhs60.hv.p763
(custom)
cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:* |
|
| lexmark | c950 |
Affected:
0 , ≤ lhs60.tp.p763
(custom)
cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:* |
|
| lexmark | x548 |
Affected:
0 , ≤ lhs60.vk.p763
(custom)
cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:* |
|
| lexmark | x746 |
Affected:
0 , ≤ lhs60.ny.p763
(custom)
cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:* |
|
| lexmark | x792 |
Affected:
0 , ≤ lhs60.mr.p763
(custom)
cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:* |
|
| lexmark | x925 |
Affected:
0 , ≤ lhs60.hk.p763
(custom)
cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:* |
|
| lexmark | x950 |
Affected:
0 , ≤ lhs60.tq.p763
(custom)
cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:* |
|
| lexmark | 6500e |
Affected:
0 , ≤ lhs60.jr.p763
(custom)
cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:* |
Date Public
2024-01-19 05:00
Credits
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T22:16:47.299Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtpc_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstpc_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtct_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtpm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtmm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mslsg_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxlsg_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mslbd_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxlbd_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "msngm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mstgm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mstgm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxngm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:ms417:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms415:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms315:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms315",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.tl2.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m3150dn:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:m1145:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:m1140\\+:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms617:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms517:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms510:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms610dn:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms610dn",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.pr2.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtgm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "msngw_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mstgw_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtgw_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cslbn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cslbl_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxlbn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxlbl_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstzj_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "csnzj_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtzj_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxnzj_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxnzj_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtpp_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstpp_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstpp_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstat_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstat_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtat_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtat_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstmh_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstmh_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtmh_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtmh_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:msnsn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "msnsn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mstsn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mstsn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cx410",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.gm4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtsn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtsn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:csngv_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "csngv_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstgv_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstgv_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtgv_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtgv_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m3150de:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms610de:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms610de",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.pr4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm1145:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm1140:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx517:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx511:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx510:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx417:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx410:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx410",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.sb4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx610",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.sb7.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms711",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.dn2.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms810de",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.dn4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms812de",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.dn7.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx710",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.tu.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms911",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.sa.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx910",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.mg.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx6500e",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.jd.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cs510",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.vy4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cx510",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.gm7.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m1140:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms410:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms317:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms312:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms310:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms310",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.prl.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm1135:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx317:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx310:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx310",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.sb2.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cs310",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.vyl.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cs410",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.vy2.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cx310",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.gm2.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c746",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.cm2.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c748",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.cm4.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c792",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.hc.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c925",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.hv.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c950",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.tp.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x548",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.vk.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x746",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.ny.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x792",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.mr.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x925",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.hk.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x950",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.tq.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "6500e",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.jr.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50737",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-02-28T20:39:49.674152Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-08-23T14:56:24.259Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "various",
"vendor": "Lexmark",
"versions": [
{
"status": "affected",
"version": "various"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Sina Kheirkhah of Summoning Team working with Trend Micro\u2019s Zero Day Initiative (ZDI)"
}
],
"datePublic": "2024-01-19T05:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.\u003cbr\u003e"
}
],
"value": "The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.\n"
}
],
"impacts": [
{
"capecId": "CAPEC-153",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-153"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-02-28T02:38:03.334Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2023-50737",
"datePublished": "2024-02-28T02:38:03.334Z",
"dateReserved": "2023-12-11T20:00:38.337Z",
"dateUpdated": "2024-08-23T14:56:24.259Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50736 (GCVE-0-2023-50736)
Vulnerability from nvd – Published: 2024-02-28 02:37 – Updated: 2024-08-23 14:56
VLAI
EPSS
VEX
Title
A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.
Summary
A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
Severity
9 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.lexmark.com/en_us/solutions/security/… | vendor-advisory |
Impacted products
68 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | various |
Affected:
various
|
|
| lexmark | cxtpc_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstpc_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxtct_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxtpm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtmm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mslsg_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxlsg_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mslbd_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxlbd_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | msngm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cs310 |
Affected:
0 , ≤ lw80.vyl.p249
(custom)
cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:* |
|
| lexmark | mstgm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mstgm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxngm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | ms315 |
Affected:
0 , ≤ lw90.tl2.p205
(custom)
cpe:2.3:h:lexmark:ms417:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms415:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms315:-:*:*:*:*:*:*:* |
|
| lexmark | ms610dn |
Affected:
0 , ≤ lw90.pr2.p205
(custom)
cpe:2.3:h:lexmark:m3150dn:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:m1145:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:m1140\+:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms617:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms517:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms510:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms610dn:-:*:*:*:*:*:*:* |
|
| lexmark | mxtgm_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | msngw_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mstgw_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxtgw_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cslbn_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cslbl_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxlbn_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxlbl_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstzj_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | csnzj_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtzj_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxnzj_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxnzj_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtpp_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstpp_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstpp_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstat_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstat_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtat_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtat_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cstmh_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstmh_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtmh_firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtmh_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | msnsn_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:msnsn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mstsn_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mstsn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | mxtsn_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:mxtsn_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | csngv_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:csngv_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cs410 |
Affected:
0 , ≤ lw80.vy2.p249
(custom)
cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:* |
|
| lexmark | cstgv_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cstgv_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | cxtgv_firmware |
Affected:
0 , ≤ 222.030
(custom)
Affected: 230.001 , ≤ 230.041 (custom) Affected: 230.075 , ≤ 230.078 (custom) Affected: 230.200 , ≤ 230.203 (custom) cpe:2.3:o:lexmark:cxtgv_firmware:*:*:*:*:*:*:*:* |
|
| lexmark | ms610de |
Affected:
0 , ≤ lw90.pr4.p205
(custom)
cpe:2.3:h:lexmark:m3150de:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms610de:-:*:*:*:*:*:*:* |
|
| lexmark | mx410 |
Affected:
0 , ≤ lw90.sb4.p205
(custom)
cpe:2.3:h:lexmark:xm1145:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm1140:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx517:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx511:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx510:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx417:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx410:-:*:*:*:*:*:*:* |
|
| lexmark | mx610 |
Affected:
0 , ≤ lw90.sb7.p205
(custom)
cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:* |
|
| lexmark | ms711 |
Affected:
0 , ≤ lw90.dn2.p205
(custom)
cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:* |
|
| lexmark | ms810de |
Affected:
0 , ≤ lw90.dn4.p205
(custom)
cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:* |
|
| lexmark | ms812de |
Affected:
0 , ≤ lw90.dn7.p205
(custom)
cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:* |
|
| lexmark | mx710 |
Affected:
0 , ≤ lw90.tu.p205
(custom)
cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:* |
|
| lexmark | ms911 |
Affected:
0 , ≤ lw90.sa.p205
(custom)
cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:* |
|
| lexmark | mx910 |
Affected:
0 , ≤ lw90.mg.p205
(custom)
cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:* |
|
| lexmark | mx6500e |
Affected:
0 , ≤ lw90.jd.p205
(custom)
cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:* |
|
| lexmark | cs510 |
Affected:
0 , ≤ lw90.vy4.p205
(custom)
cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:* |
|
| lexmark | cx410 |
Affected:
0 , ≤ lw90.gm4.p205
(custom)
cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:* |
|
| lexmark | cx510 |
Affected:
0 , ≤ lw90.gm7.p205
(custom)
cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:* |
|
| lexmark | ms310 |
Affected:
0 , ≤ lw80.prl.p249
(custom)
cpe:2.3:h:lexmark:m1140:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms410:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms317:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms312:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:ms310:-:*:*:*:*:*:*:* |
|
| lexmark | mx310 |
Affected:
0 , ≤ lw80.sb2.p249
(custom)
cpe:2.3:h:lexmark:xm1135:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx317:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:mx310:-:*:*:*:*:*:*:* |
|
| lexmark | cx310 |
Affected:
0 , ≤ lw80.gm2.p249
(custom)
cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:* |
|
| lexmark | c746 |
Affected:
0 , ≤ lhs60.cm2.p763
(custom)
cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:* |
|
| lexmark | c748 |
Affected:
0 , ≤ lhs60.cm4.p763
(custom)
cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:* |
|
| lexmark | c792 |
Affected:
0 , ≤ lhs60.hc.p763
(custom)
cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:* |
|
| lexmark | c925 |
Affected:
0 , ≤ lhs60.hv.p763
(custom)
cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:* |
|
| lexmark | c950 |
Affected:
0 , ≤ lhs60.tp.p763
(custom)
cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:* |
|
| lexmark | x548 |
Affected:
0 , ≤ lhs60.vk.p763
(custom)
cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:* |
|
| lexmark | x746 |
Affected:
0 , ≤ lhs60.ny.p763
(custom)
cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:* |
|
| lexmark | x792 |
Affected:
0 , ≤ lhs60.mr.p763
(custom)
cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:* |
|
| lexmark | x925 |
Affected:
0 , ≤ lhs60.hk.p763
(custom)
cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:* |
|
| lexmark | x950 |
Affected:
0 , ≤ lhs60.tq.p763
(custom)
cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:* cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:* |
|
| lexmark | 6500e |
Affected:
0 , ≤ lhs60.jr.p763
(custom)
cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:* |
Date Public
2024-01-19 05:00
Credits
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T22:16:47.298Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"vendor-advisory",
"x_transferred"
],
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtpc_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstpc_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtct_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtpm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtmm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mslsg_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxlsg_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mslbd_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxlbd_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "msngm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cs310",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.vyl.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mstgm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mstgm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxngm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:ms417:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms415:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms315:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms315",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.tl2.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m3150dn:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:m1145:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:m1140\\+:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms617:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms517:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms510:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms610dn:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms610dn",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.pr2.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtgm_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "msngw_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mstgw_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtgw_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cslbn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cslbl_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxlbn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxlbl_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstzj_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "csnzj_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtzj_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxnzj_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxnzj_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtpp_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstpp_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstpp_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstat_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstat_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtat_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtat_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstmh_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstmh_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtmh_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtmh_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:msnsn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "msnsn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mstsn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mstsn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:mxtsn_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mxtsn_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:csngv_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "csngv_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cs410",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.vy2.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cstgv_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cstgv_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:lexmark:cxtgv_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cxtgv_firmware",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "222.030",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "230.001",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.078",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.203",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m3150de:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms610de:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms610de",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.pr4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm1145:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm1140:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx517:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx511:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx510:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx417:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx410:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx410",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.sb4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx610",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.sb7.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms711",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.dn2.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms810de",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.dn4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms812de",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.dn7.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx710",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.tu.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms911",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.sa.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx910",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.mg.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx6500e",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.jd.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cs510",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.vy4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cx410",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.gm4.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cx510",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw90.gm7.p205",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:m1140:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms410:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms317:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms312:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:ms310:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "ms310",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.prl.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xm1135:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx317:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:mx310:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "mx310",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.sb2.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "cx310",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lw80.gm2.p249",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c746",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.cm2.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c748",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.cm4.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c792",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.hc.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c925",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.hv.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "c950",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.tp.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x548",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.vk.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x746",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.ny.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x792",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.mr.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x925",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.hk.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:*",
"cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "x950",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.tq.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "6500e",
"vendor": "lexmark",
"versions": [
{
"lessThanOrEqual": "lhs60.jr.p763",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50736",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-03-05T16:46:14.875524Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-08-23T14:56:10.517Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "various",
"vendor": "Lexmark",
"versions": [
{
"status": "affected",
"version": "various"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"user": "00000000-0000-4000-9000-000000000000",
"value": "Chris Anastasio working with Trend Micro\u2019s Zero Day Initiative (ZDI)"
}
],
"datePublic": "2024-01-19T05:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.\u003cbr\u003e"
}
],
"value": "A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.\n"
}
],
"impacts": [
{
"capecId": "CAPEC-456",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-456 Infected Memory"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-131",
"description": "CWE-131",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-02-28T02:37:45.438Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.",
"x_generator": {
"engine": "Vulnogram 0.1.0-dev"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2023-50736",
"datePublished": "2024-02-28T02:37:45.438Z",
"dateReserved": "2023-12-11T20:00:38.337Z",
"dateUpdated": "2024-08-23T14:56:10.517Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-65078 (GCVE-0-2025-65078)
Vulnerability from cvelistv5 – Published: 2026-02-03 20:51 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Untrusted search path vulnerability in Embedded Solutions Framework
Summary
An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-426 - Untrusted Search Path
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.507
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65078",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-06T04:55:26.714128Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:23.262Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.507",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code."
}
],
"value": "An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-38",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-38 Leveraging/Manipulating Configuration File Search Paths"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-426",
"description": "CWE-426 Untrusted Search Path",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:51:20.556Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Untrusted search path vulnerability in Embedded Solutions Framework",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65078",
"datePublished": "2026-02-03T20:51:20.556Z",
"dateReserved": "2025-11-17T13:56:38.588Z",
"dateUpdated": "2026-02-26T15:04:23.262Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65077 (GCVE-0-2025-65077)
Vulnerability from cvelistv5 – Published: 2026-02-03 20:44 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Relative path traversal vulnerability in Embedded Solutions Framework
Summary
A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.507
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65077",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-06T04:55:27.610829Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:23.610Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.507",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-139",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-139 Relative Path Traversal"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:44:32.330Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Relative path traversal vulnerability in Embedded Solutions Framework",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65077",
"datePublished": "2026-02-03T20:44:32.330Z",
"dateReserved": "2025-11-17T13:56:38.587Z",
"dateUpdated": "2026-02-26T15:04:23.610Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65081 (GCVE-0-2025-65081)
Vulnerability from cvelistv5 – Published: 2026-02-03 20:39 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Out-of-bounds read vulnerability in Postscript interpreter
Summary
An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.506
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65081",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-04T04:56:08.400670Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:23.914Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.506",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-153",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-153 Input Data Manipulation"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:39:14.501Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Out-of-bounds read vulnerability in Postscript interpreter",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65081",
"datePublished": "2026-02-03T20:39:14.501Z",
"dateReserved": "2025-11-17T13:56:38.589Z",
"dateUpdated": "2026-02-26T15:04:23.914Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65080 (GCVE-0-2025-65080)
Vulnerability from cvelistv5 – Published: 2026-02-03 20:35 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Type confusion vulnerability in Postscript interpreter
Summary
A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.506
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65080",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-04T04:56:07.187232Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:24.195Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.506",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-153",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-153 Input Data Manipulation"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-843",
"description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:35:54.592Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Type confusion vulnerability in Postscript interpreter",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65080",
"datePublished": "2026-02-03T20:35:54.592Z",
"dateReserved": "2025-11-17T13:56:38.589Z",
"dateUpdated": "2026-02-26T15:04:24.195Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65079 (GCVE-0-2025-65079)
Vulnerability from cvelistv5 – Published: 2026-02-03 20:23 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Heap-based buffer overflow vulnerability in Postscript interpreter
Summary
A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.506
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65079",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-04T04:56:06.044346Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:24.490Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.506",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:23:24.405Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Heap-based buffer overflow vulnerability in Postscript interpreter",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65079",
"datePublished": "2026-02-03T20:23:24.405Z",
"dateReserved": "2025-11-17T13:56:38.589Z",
"dateUpdated": "2026-02-26T15:04:24.490Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-9269 (GCVE-0-2025-9269)
Vulnerability from cvelistv5 – Published: 2025-09-09 17:21 – Updated: 2025-09-29 15:34
VLAI
EPSS
VEX
Title
Server-Side Request Forgery (SSRF) vulnerability found in embedded web server
Summary
A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-918 - Server-Side Request Forgery (SSRF)
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. |
Affected:
0 , ≤ CXTLS.250.199
(custom)
Affected: 0 , ≤ MXTLS.250.199 (custom) Affected: 0 , ≤ CSTLS.250.199 (custom) Affected: 0 , ≤ MSNSN.250.199 (custom) Affected: 0 , ≤ MSTSN.250.199 (custom) Affected: 0 , ≤ MXTSN.250.199 (custom) Affected: 0 , ≤ CSNGV.250.199 (custom) Affected: 0 , ≤ CSTGV.250.199 (custom) Affected: 0 , ≤ CXTGV.250.199 (custom) Affected: 0 , ≤ CXTPC.250.199 (custom) Affected: 0 , ≤ CSTPC.250.199 (custom) Affected: 0 , ≤ MXTCT.250.199 (custom) Affected: 0 , ≤ MXTPM.250.199 (custom) Affected: 0 , ≤ CXTMM.250.199 (custom) Affected: 0 , ≤ CSTMM.250.199 (custom) Affected: 0 , ≤ MSNGM.250.199 (custom) Affected: 0 , ≤ MSTGM.250.199 (custom) Affected: 0 , ≤ MXNGM.250.199 (custom) Affected: 0 , ≤ MXTGM.250.199 (custom) Affected: 0 , ≤ MSNGW.250.199 (custom) Affected: 0 , ≤ MSTGW.250.199 (custom) Affected: 0 , ≤ MXTGW.250.199 (custom) Affected: 0 , ≤ CSTZJ.250.199 (custom) Affected: 0 , ≤ CSNZJ.250.199 (custom) Affected: 0 , ≤ CXTZJ.250.199 (custom) Affected: 0 , ≤ CXNZJ.250.199 (custom) Affected: 0 , ≤ MSLSG.230.466 (custom) Affected: 0 , ≤ MXLSG.230.466 (custom) Affected: 0 , ≤ MSLBD.230.466 (custom) Affected: 0 , ≤ MXLBD.230.466 (custom) Affected: 0 , ≤ CSLBN.230.466 (custom) Affected: 0 , ≤ CSLBL.230.466 (custom) Affected: 0 , ≤ CXLBN.230.466 (custom) Affected: 0 , ≤ CXLBL.230.466 (custom) Affected: 0 , ≤ CXTPP.230.466 (custom) Affected: 0 , ≤ CSTPP.230.466 (custom) Affected: 0 , ≤ CSTAT.230.466 (custom) Affected: 0 , ≤ CXTAT.230.466 (custom) Affected: 0 , ≤ CSTMH.230.466 (custom) Affected: 0 , ≤ CXTMH.230.466 (custom) Affected: 0 , ≤ LW90.TL2.P224 (custom) Affected: 0 , ≤ LW90.PR2.P224 (custom) Affected: 0 , ≤ LW90.PR4.P224 (custom) Affected: 0 , ≤ LW90.SB4.P224 (custom) Affected: 0 , ≤ LW90.SB7.P224 (custom) Affected: 0 , ≤ LW90.DN2.P224 (custom) Affected: 0 , ≤ LW90.DN4.P224 (custom) Affected: 0 , ≤ LW90.DN7.P224 (custom) Affected: 0 , ≤ LW90.TU.P224 (custom) Affected: 0 , ≤ LW90.SA.P224 (custom) Affected: 0 , ≤ LW90.MG.P224 (custom) Affected: 0 , ≤ LW90.GM7.P224 (custom) Affected: 0 , ≤ LW90.GM4.P224 (custom) Affected: 0 , ≤ LW90.VY4.P224 (custom) Affected: 0 , ≤ LW80.PRL.P260 (custom) Affected: 0 , ≤ LW80.SB2.P260 (custom) Affected: 0 , ≤ LW80.VYL.P260 (custom) Affected: 0 , ≤ LW80.VY2.P260 (custom) Affected: 0 , ≤ LW80.GM2.P260 (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-9269",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-09-09T17:43:57.556819Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-09-09T18:36:21.085Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"webserver"
],
"product": "CX, XC, CS, MS, MX, XM, et. al.",
"vendor": "Lexmark",
"versions": [
{
"changes": [
{
"at": "CXTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPC.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPC.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPC.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPC.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTCT.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTCT.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTPM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTPM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXNGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXNGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXNZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXNZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLSG.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLSG.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLSG.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLSG.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLBD.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLBD.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLBD.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLBD.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBN.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBN.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBL.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBL.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBN.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBN.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBL.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBL.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPP.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPP.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPP.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPP.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTAT.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTAT.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTAT.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTAT.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMH.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMH.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMH.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMH.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TL2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TL2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TU.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TU.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SA.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SA.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.MG.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.MG.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.VY4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.VY4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.PRL.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.PRL.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.SB2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.SB2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VYL.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VYL.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VY2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VY2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.GM2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.GM2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server.\u0026nbsp;Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device."
}
],
"value": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server.\u00a0Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device."
}
],
"impacts": [
{
"capecId": "CAPEC-101",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-101 Server Side Include (SSI) Injection"
}
]
},
{
"capecId": "CAPEC-33",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-33: HTTP Request Smuggling"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918: Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-09-29T15:34:06.094Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Server-Side Request Forgery (SSRF) vulnerability found in embedded web server",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-9269",
"datePublished": "2025-09-09T17:21:36.589Z",
"dateReserved": "2025-08-20T15:10:24.655Z",
"dateUpdated": "2025-09-29T15:34:06.094Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-4046 (GCVE-0-2025-4046)
Vulnerability from cvelistv5 – Published: 2025-08-19 13:12 – Updated: 2026-02-26 17:48
VLAI
EPSS
VEX
Title
Missing Authorization in Lexmark Cloud Services badge management
Summary
A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization
Severity
8.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | Lexmark Cloud Services |
Affected:
0
|
Date Public
2025-08-18 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-4046",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-20T03:56:05.961084Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T17:48:28.920Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Lexmark Cloud Services",
"vendor": "Lexmark",
"versions": [
{
"status": "affected",
"version": "0"
}
]
}
],
"datePublic": "2025-08-18T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ch4\u003e\n\n\u003c/h4\u003e\u003ch4\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization\u003c/span\u003e\u003c/h4\u003e\n\n\u003cbr\u003e"
}
],
"value": "A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization"
}
],
"impacts": [
{
"capecId": "CAPEC-58",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-58: Restful Privilege Elevation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-19T13:12:28.574Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Missing Authorization in Lexmark Cloud Services badge management",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-4046",
"datePublished": "2025-08-19T13:12:28.574Z",
"dateReserved": "2025-04-28T17:55:12.343Z",
"dateUpdated": "2026-02-26T17:48:28.920Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-4044 (GCVE-0-2025-4044)
Vulnerability from cvelistv5 – Published: 2025-08-19 13:12 – Updated: 2026-02-26 17:48
VLAI
EPSS
VEX
Title
XML External Entity Injection vulnerability in various Lexmark Universal Drivers
Summary
Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.
Severity
8.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-611 - Improper Restriction of XML External Entity Reference
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | Universal Print Driver |
Affected:
0 , < 3.0.6.0
(custom)
|
|
| Lexmark | Printer Software G2 |
Affected:
0 , < 2.17.0.0
(custom)
|
Date Public
2025-08-18 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-4044",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-20T03:56:04.854966Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T17:48:29.270Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Universal Print Driver",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "3.0.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Printer Software G2",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "2.17.0.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"datePublic": "2025-08-18T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.\u003cbr\u003e"
}
],
"value": "Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL."
}
],
"impacts": [
{
"capecId": "CAPEC-221",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-221 Data Serialization External Entities Blowup"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-611",
"description": "CWE-611 Improper Restriction of XML External Entity Reference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-19T13:12:09.782Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "XML External Entity Injection vulnerability in various Lexmark Universal Drivers",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-4044",
"datePublished": "2025-08-19T13:12:09.782Z",
"dateReserved": "2025-04-28T17:54:55.187Z",
"dateUpdated": "2026-02-26T17:48:29.270Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-11344 (GCVE-0-2024-11344)
Vulnerability from cvelistv5 – Published: 2025-02-13 18:51 – Updated: 2025-02-13 19:19
VLAI
EPSS
VEX
Title
Type confusion vulnerability in the Postscript interpreter in various Lexmark devices
Summary
A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
Severity
7.3 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. |
Affected:
0 , ≤ CXTLS.240.076
(custom)
Affected: CXTLS.240.200 , < * (custom) Affected: 0 , ≤ MXTLS.240.076 (custom) Affected: MXTLS.240.200 , < * (custom) Affected: 0 , ≤ CSTLS.240.076 (custom) Affected: CSTLS.240.200 , < * (custom) Affected: 0 , ≤ MSNSN.240.042 (custom) Affected: MSNSN.240.200 , < * (custom) Affected: 0 , ≤ MSTSN.240.042 (custom) Affected: MSTSN.240.200 , < * (custom) Affected: 0 , ≤ MXTSN.240.042 (custom) Affected: MXTSN.240.200 , < * (custom) Affected: 0 , ≤ CSNGV.240.042 (custom) Affected: CSNGV.240.200 , < * (custom) Affected: 0 , ≤ CSTGV.240.042 (custom) Affected: CSTGV.240.200 , < * (custom) Affected: 0 , ≤ CXTGV.240.042 (custom) Affected: CXTGV.240.200 , < * (custom) Affected: 0 , ≤ CXTPC.240.042 (custom) Affected: CXTPC.240.200 , < * (custom) Affected: 0 , ≤ CSTPC.240.042 (custom) Affected: CSTPC.240.200 , < * (custom) Affected: 0 , ≤ MXTCT.240.042 (custom) Affected: MXTCT.240.200 , < * (custom) Affected: 0 , ≤ MXTPM.240.042 (custom) Affected: MXTPM.240.200 , < * (custom) Affected: 0 , ≤ CXTMM.240.042 (custom) Affected: CXTMM.240.200 , < * (custom) Affected: 0 , ≤ CSTMM.240.042 (custom) Affected: CSTMM.240.200 , < * (custom) Affected: 0 , ≤ CSTZJ.240.042 (custom) Affected: CSTZJ.240.200 , < * (custom) Affected: 0 , ≤ CSNZJ.240.042 (custom) Affected: CSNZJ.240.200 , < * (custom) Affected: 0 , ≤ CXTZJ.240.042 (custom) Affected: CXTZJ.240.200 , < * (custom) Affected: 0 , ≤ CXNZJ.240.042 (custom) Affected: CXNZJ.240.200 , < * (custom) Affected: 0 , ≤ MSNGM.240.042 (custom) Affected: MSNGM.240.200 , < * (custom) Affected: 0 , ≤ MSTGM.240.042 (custom) Affected: MSTGM.240.200 , < * (custom) Affected: 0 , ≤ MXNGM.240.042 (custom) Affected: MXNGM.240.200 , < * (custom) Affected: 0 , ≤ MXTGM.240.042 (custom) Affected: MXTGM.240.200 , < * (custom) Affected: 0 , ≤ MSNGW.240.042 (custom) Affected: MSNGW.240.200 , < * (custom) Affected: 0 , ≤ MSTGW.240.042 (custom) Affected: MSTGW.240.200 , < * (custom) Affected: 0 , ≤ MXTGW.240.042 (custom) Affected: MXTGW.240.200 , < * (custom) Affected: 0 , ≤ MSLSG.230.401 (custom) Affected: 0 , ≤ MXLSG.230.401 (custom) Affected: 0 , ≤ MSLBD.230.401 (custom) Affected: 0 , ≤ MXLBD.230.401 (custom) Affected: 0 , ≤ CSLBN.230.401 (custom) Affected: 0 , ≤ CSLBL.230.401 (custom) Affected: 0 , ≤ CXLBN.230.401 (custom) Affected: 0 , ≤ CXLBL.230.401 (custom) Affected: 0 , ≤ CXTPP.230.401 (custom) Affected: 0 , ≤ CSTPP.230.401 (custom) Affected: 0 , ≤ CSTAT.230.401 (custom) Affected: 0 , ≤ CXTAT.230.401 (custom) Affected: 0 , ≤ CSTMH.230.401 (custom) Affected: 0 , ≤ CXTMH.230.401 (custom) Affected: 0 , ≤ LW90.TL2.P215 (custom) Affected: 0 , ≤ LW90.PR2.P215 (custom) Affected: 0 , ≤ LW90.PR4.P215 (custom) Affected: 0 , ≤ LW90.SB4.P215 (custom) Affected: 0 , ≤ LW90.SB7.P215 (custom) Affected: 0 , ≤ LW90.DN2.P215 (custom) Affected: 0 , ≤ LW90.DN4.P215 (custom) Affected: 0 , ≤ LW90.DN7.P215 (custom) Affected: 0 , ≤ LW90.TU.P215 (custom) Affected: 0 , ≤ LW90.SA.P215 (custom) Affected: 0 , ≤ LW90.MG.P215 (custom) Affected: 0 , ≤ LW90.GM7.P215 (custom) Affected: 0 , ≤ LW90.GM4.P215 (custom) Affected: 0 , ≤ LW90.VY4.P215 (custom) Affected: 0 , ≤ LW80.PRL.P257 (custom) Affected: 0 , ≤ LW80.SB2.P257 (custom) Affected: 0 , ≤ LW80.VYL.P257 (custom) Affected: 0 , ≤ LW80.VY2.P257 (custom) Affected: 0 , ≤ LW80.GM2.P257 (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11344",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-13T19:16:46.776468Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-13T19:19:11.784Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "CX, XC, CS, MS, MX, XM, et. al.",
"vendor": "Lexmark",
"versions": [
{
"changes": [
{
"at": "CXTLS.240.077 - CXTLS.240.199",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTLS.240.076",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTLS.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTLS.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTLS.240.077 - MXTLS.240.199",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTLS.240.076",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTLS.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTLS.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTLS.240.077 - CSTLS.240.199",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTLS.240.076",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTLS.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTLS.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNSN.240.043 - MSNSN.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNSN.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNSN.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSNSN.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTSN.240.043 - MSTSN.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTSN.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTSN.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSTSN.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTSN.240.043 - MXTSN.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTSN.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTSN.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTSN.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNGV.240.043 - CSNGV.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNGV.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNGV.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSNGV.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTGV.240.043 - CSTGV.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTGV.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTGV.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTGV.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTGV.240.043 - CXTGV.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTGV.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTGV.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTGV.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPC.240.043 - CXTPC.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPC.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPC.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTPC.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPC.240.043 - CSTPC.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPC.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPC.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTPC.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTCT.240.043 - MXTCT.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTCT.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTCT.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTCT.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTPM.240.043-MXTPM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTPM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTPM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTPM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMM.240.043-CXTMM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTMM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMM.240.043 - CSTMM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTMM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTZJ.240.043 - CSTZJ.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTZJ.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTZJ.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTZJ.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNZJ.240.043 - CSNZJ.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNZJ.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNZJ.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSNZJ.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTZJ.240.043 - CXTZJ.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTZJ.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTZJ.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTZJ.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXNZJ.240.043 - CXNZJ.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXNZJ.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXNZJ.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXNZJ.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGM.240.043 - MSNGM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSNGM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGM.240.043 - MSTGM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSTGM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXNGM.240.043 - MXNGM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXNGM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXNGM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXNGM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGM.240.043 - MXTGM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTGM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGW.240.043 - MSNGW.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGW.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGW.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSNGW.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGW.240.043 - MSTGW.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGW.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGW.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSTGW.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGW.240.043 - MXTGW.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGW.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGW.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTGW.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLSG.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLSG.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLSG.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLSG.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLBD.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLBD.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLBD.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLBD.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBN.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBN.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBL.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBL.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBN.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBN.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBL.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBL.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPP.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPP.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPP.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPP.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTAT.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTAT.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTAT.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTAT.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMH.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMH.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMH.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMH.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TL2.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TL2.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR2.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR2.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB7.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB7.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN2.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN2.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN7.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN7.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TU.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TU.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SA.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SA.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.MG.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.MG.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM7.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM7.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.VY4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.VY4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.PRL.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.PRL.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.SB2.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.SB2.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VYL.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VYL.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VY2.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VY2.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.GM2.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.GM2.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cp\u003eA type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.\u003cbr\u003e\u003c/p\u003e"
}
],
"value": "A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code."
}
],
"impacts": [
{
"capecId": "CAPEC-123",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-123 Buffer Manipulation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-843",
"description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-02-13T18:53:16.828Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Type confusion vulnerability in the Postscript interpreter in various Lexmark devices",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2024-11344",
"datePublished": "2025-02-13T18:51:23.777Z",
"dateReserved": "2024-11-18T16:10:34.720Z",
"dateUpdated": "2025-02-13T19:19:11.784Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-1127 (GCVE-0-2025-1127)
Vulnerability from cvelistv5 – Published: 2025-02-13 18:49 – Updated: 2025-02-13 19:14
VLAI
EPSS
VEX
Title
Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server
Summary
The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.
Severity
9.1 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. |
Affected:
0 , ≤ CXTLS.240.205
(custom)
Affected: 0 , ≤ MXTLS.240.205 (custom) Affected: 0 , ≤ CSTLS.240.205 (custom) Affected: 0 , ≤ MSNSN.240.205 (custom) Affected: 0 , ≤ MSTSN.240.205 (custom) Affected: 0 , ≤ MXTSN.240.205 (custom) Affected: 0 , ≤ CSNGV.240.205 (custom) Affected: 0 , ≤ CSTGV.240.205 (custom) Affected: 0 , ≤ CXTGV.240.205 (custom) Affected: 0 , ≤ CXTPC.240.205 (custom) Affected: 0 , ≤ CSTPC.240.205 (custom) Affected: 0 , ≤ MXTCT.240.205 (custom) Affected: 0 , ≤ MXTPM.240.205 (custom) Affected: 0 , ≤ CXTMM.240.205 (custom) Affected: 0 , ≤ CSTMM.240.205 (custom) Affected: 0 , ≤ MSNGM.240.205 (custom) Affected: 0 , ≤ MSTGM.240.205 (custom) Affected: 0 , ≤ MXNGM.240.205 (custom) Affected: 0 , ≤ MXTGM.240.205 (custom) Affected: 0 , ≤ MSNGW.240.205 (custom) Affected: 0 , ≤ MSTGW.240.205 (custom) Affected: 0 , ≤ MXTGW.240.205 (custom) Affected: 0 , ≤ CSTZJ.240.205 (custom) Affected: 0 , ≤ CSNZJ.240.205 (custom) Affected: 0 , ≤ CXTZJ.240.205 (custom) Affected: 0 , ≤ CXNZJ.240.205 (custom) Affected: 0 , ≤ MSLSG.240.407 (custom) Affected: 0 , ≤ MXLSG.240.407 (custom) Affected: 0 , ≤ MSLBD.240.407 (custom) Affected: 0 , ≤ MXLBD.240.407 (custom) Affected: 0 , ≤ CSLBN.240.407 (custom) Affected: 0 , ≤ CSLBL.240.407 (custom) Affected: 0 , ≤ CXLBN.240.407 (custom) Affected: 0 , ≤ CXLBL.240.407 (custom) Affected: 0 , ≤ CXTPP.240.407 (custom) Affected: 0 , ≤ CSTPP.240.407 (custom) Affected: 0 , ≤ CSTAT.240.407 (custom) Affected: 0 , ≤ CXTAT.240.407 (custom) Affected: 0 , ≤ CSTMH.240.407 (custom) Affected: 0 , ≤ CXTMH.240.407 (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-1127",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-13T19:14:28.287539Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-13T19:14:43.391Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"webserver"
],
"product": "CX, XC, CS, MS, MX, XM, et. al.",
"vendor": "Lexmark",
"versions": [
{
"changes": [
{
"at": "CXTLS.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTLS.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTLS.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTLS.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTLS.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTLS.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNSN.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNSN.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTSN.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTSN.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTSN.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTSN.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNGV.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNGV.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTGV.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTGV.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTGV.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTGV.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPC.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPC.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPC.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPC.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTCT.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTCT.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTPM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTPM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXNGM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXNGM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGW.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGW.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGW.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGW.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGW.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGW.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTZJ.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTZJ.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNZJ.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNZJ.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTZJ.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTZJ.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXNZJ.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXNZJ.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLSG.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLSG.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLSG.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLSG.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLBD.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLBD.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLBD.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLBD.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBN.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBN.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBL.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBL.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBN.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBN.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBL.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBL.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPP.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPP.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPP.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPP.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTAT.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTAT.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTAT.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTAT.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMH.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMH.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMH.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMH.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.\n\n\u003cp\u003e\u003c/p\u003e"
}
],
"value": "The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem."
}
],
"impacts": [
{
"capecId": "CAPEC-123",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-123 Buffer Manipulation"
}
]
},
{
"capecId": "CAPEC-124",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-124 Shared Resource Manipulation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-362",
"description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-02-13T18:49:43.500Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-1127",
"datePublished": "2025-02-13T18:49:43.500Z",
"dateReserved": "2025-02-07T21:52:05.399Z",
"dateUpdated": "2025-02-13T19:14:43.391Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-1126 (GCVE-0-2025-1126)
Vulnerability from cvelistv5 – Published: 2025-02-11 16:50 – Updated: 2025-02-12 20:51
VLAI
EPSS
VEX
Title
Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC).
Summary
A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client.
Severity
9.3 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | Lexmark Print Management Client |
Affected:
3.0.0 , < 3.5.0
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-1126",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-11T17:04:45.524278Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-12T20:51:45.122Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Lexmark Print Management Client",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "3.5.0",
"status": "affected",
"version": "3.0.0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client."
}
],
"value": "A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client."
}
],
"impacts": [
{
"capecId": "CAPEC-153",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-153 Input Data Manipulation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-807",
"description": "CWE-807",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-02-11T16:57:18.291Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC).",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends updating the LPMC version if affected.\u003cbr\u003e"
}
],
"value": "Lexmark recommends updating the LPMC version if affected."
}
],
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-1126",
"datePublished": "2025-02-11T16:50:34.270Z",
"dateReserved": "2025-02-07T21:20:13.715Z",
"dateUpdated": "2025-02-12T20:51:45.122Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50733 (GCVE-0-2023-50733)
Vulnerability from cvelistv5 – Published: 2025-01-21 22:03 – Updated: 2025-01-22 18:43
VLAI
EPSS
VEX
Title
A Server-Side Request Forgery (SSRF) vulnerability exists in newer Lexmark devices.
Summary
A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer
Lexmark devices.
Severity
8.6 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.lexmark.com/en_us/solutions/security/… | vendor-advisory |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50733",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-22T18:43:06.465309Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-22T18:43:36.163Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "various",
"vendor": "Lexmark",
"versions": [
{
"lessThanOrEqual": "230.211",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer\nLexmark devices."
}
],
"value": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer\nLexmark devices."
}
],
"impacts": [
{
"capecId": "CAPEC-664",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-664 Server Side Request Forgery"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918 Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20 Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-21T22:03:28.688Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "A Server-Side Request Forgery (SSRF) vulnerability exists in newer Lexmark devices.",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2023-50733",
"datePublished": "2025-01-21T22:03:28.688Z",
"dateReserved": "2023-12-11T20:00:38.335Z",
"dateUpdated": "2025-01-22T18:43:36.163Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50739 (GCVE-0-2023-50739)
Vulnerability from cvelistv5 – Published: 2025-01-17 23:47 – Updated: 2025-01-22 14:23
VLAI
EPSS
VEX
Title
A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.
Summary
A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | Printer Firmware |
Affected:
0 , ≤ 230.209
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50739",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-22T14:22:31.707775Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-22T14:23:31.226Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Printer Firmware",
"vendor": "Lexmark",
"versions": [
{
"lessThanOrEqual": "230.209",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A\u0026nbsp;buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark\u0026nbsp;devices. The vulnerability can be leveraged by an attacker to execute arbitrary code."
}
],
"value": "A\u00a0buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark\u00a0devices. The vulnerability can be leveraged by an attacker to execute arbitrary code."
}
],
"impacts": [
{
"descriptions": [
{
"lang": "en",
"value": "Successful exploitation of this vulnerability can lead to an attacker being able to remotely execute arbitrary code on a device."
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-17T23:47:13.923Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2023-50739",
"datePublished": "2025-01-17T23:47:13.923Z",
"dateReserved": "2023-12-11T20:00:38.337Z",
"dateUpdated": "2025-01-22T14:23:31.226Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-50738 (GCVE-0-2023-50738)
Vulnerability from cvelistv5 – Published: 2025-01-17 21:10 – Updated: 2025-01-17 22:02
VLAI
EPSS
VEX
Title
A firmware downgrade prevention vulnerability has been identified in newer Lexmark devices.
Summary
A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to
override this downgrade protection has been identified.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | Printer Firmware |
Affected:
0 , ≤ 230.041
(custom)
Affected: 230.075 , ≤ 230.086 (custom) Affected: 230.100 , ≤ 230.104 (custom) Affected: 230.200 , ≤ 230.209 (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-50738",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-17T22:02:51.732818Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-01-17T22:02:59.237Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Printer Firmware",
"vendor": "Lexmark",
"versions": [
{
"lessThanOrEqual": "230.041",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.086",
"status": "affected",
"version": "230.075",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.104",
"status": "affected",
"version": "230.100",
"versionType": "custom"
},
{
"lessThanOrEqual": "230.209",
"status": "affected",
"version": "230.200",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A\u0026nbsp;new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to \noverride this downgrade protection has been identified."
}
],
"value": "A\u00a0new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to \noverride this downgrade protection has been identified."
}
],
"impacts": [
{
"capecId": "CAPEC-21",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-21 Exploitation of Trusted Identifiers"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-354",
"description": "CWE-354 Improper Validation of Integrity Check Value",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-1328",
"description": "CWE-1328 Security Version Number Mutable to Older Versions",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-01-17T21:27:34.693Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "A firmware downgrade prevention vulnerability has been identified in newer Lexmark devices.",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2023-50738",
"datePublished": "2025-01-17T21:10:44.220Z",
"dateReserved": "2023-12-11T20:00:38.337Z",
"dateUpdated": "2025-01-17T22:02:59.237Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}