CVE-2024-11346 (GCVE-0-2024-11346)
Vulnerability from cvelistv5
Published
2025-02-13 18:54
Modified
2025-02-13 19:17
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
Summary
: Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from *.*.P001 through *.*.P233, from *.*.P001 through *.*.P759, from *.*.P001 through *.*.P836.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Lexmark International | CX, XC, CS, MS, MX, XM, et. al. |
Version: 0 < Version: CXTLS.240.200 < * Version: 0 < Version: MXTLS.240.200 < * Version: 0 < Version: CSTLS.240.200 < * Version: 0 < Version: MSNSN.240.200 < * Version: 0 < Version: MSTSN.240.200 < * Version: 0 < Version: MXTSN.240.200 < * Version: 0 < Version: CSNGV.240.200 < * Version: 0 < Version: CSTGV.240.200 < * Version: 0 < Version: CXTGV.240.200 < * Version: 0 < Version: CXTPC.240.200 < * Version: 0 < Version: CSTPC.240.200 < * Version: 0 < Version: MXTCT.240.200 < * Version: 0 < Version: MXTPM.240.200 < * Version: 0 < Version: CXTMM.240.200 < * Version: 0 < Version: CSTMM.240.200 < * Version: 0 < Version: CSTZJ.240.200 < * Version: 0 < Version: CSNZJ.240.200 < * Version: 0 < Version: CXTZJ.240.200 < * Version: 0 < Version: CXNZJ.240.200 < * Version: 0 < Version: MSNGM.240.200 < * Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < Version: 0 < |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-11346",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-13T19:16:38.233943Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-13T19:17:04.920Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"Postscript interpreter"
],
"product": "CX, XC, CS, MS, MX, XM, et. al.",
"vendor": "Lexmark International",
"versions": [
{
"changes": [
{
"at": "CXTLS.240.077 - CXTLS.240.199",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTLS.240.076",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTLS.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTLS.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTLS.240.077 - MXTLS.240.199",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTLS.240.076",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTLS.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTLS.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTLS.240.077 - CSTLS.240.199",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTLS.240.076",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTLS.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTLS.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNSN.240.043 - MSNSN.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNSN.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNSN.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSNSN.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTSN.240.043 - MSTSN.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTSN.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTSN.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSTSN.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTSN.240.043 - MXTSN.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTSN.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTSN.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTSN.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNGV.240.043 - CSNGV.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNGV.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNGV.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSNGV.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTGV.240.043 - CSTGV.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTGV.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTGV.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTGV.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTGV.240.043 - CXTGV.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTGV.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTGV.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTGV.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPC.240.043 - CXTPC.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPC.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPC.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTPC.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPC.240.043 - CSTPC.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPC.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPC.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTPC.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTCT.240.043 - MXTCT.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTCT.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTCT.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTCT.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTPM.240.043-MXTPM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTPM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTPM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MXTPM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMM.240.043-CXTMM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTMM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMM.240.043 - CSTMM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTMM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTZJ.240.043 - CSTZJ.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTZJ.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTZJ.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSTZJ.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNZJ.240.043 - CSNZJ.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNZJ.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNZJ.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CSNZJ.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTZJ.240.043 - CXTZJ.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTZJ.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTZJ.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXTZJ.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXNZJ.240.043 - CXNZJ.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXNZJ.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXNZJ.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "CXNZJ.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGM.240.043 - MSNGM.240.069",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGM.240.042",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGM.240.201 and later",
"status": "unaffected"
}
],
"lessThan": "*",
"status": "affected",
"version": "MSNGM.240.200",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLSG.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLSG.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLSG.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLSG.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLBD.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLBD.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLBD.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLBD.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBN.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBN.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBL.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBL.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBN.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBN.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBL.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBL.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPP.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPP.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPP.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPP.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTAT.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTAT.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTAT.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTAT.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMH.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMH.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMH.230.402 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMH.230.401",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TL2.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TL2.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR2.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR2.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB7.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB7.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN2.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN2.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN7.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN7.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TU.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TU.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SA.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SA.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.MG.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.MG.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM7.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM7.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.VY4.P216 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.VY4.P215",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.PRL.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.PRL.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.SB2.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.SB2.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VYL.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VYL.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VY2.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VY2.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.GM2.P258 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.GM2.P257",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": ": Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027) vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Resource Injection.\u003cp\u003eThis issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from *.*.P001 through *.*.P233, from *.*.P001 through *.*.P759, from *.*.P001 through *.*.P836.\u003c/p\u003e"
}
],
"value": ": Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027) vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from *.*.P001 through *.*.P233, from *.*.P001 through *.*.P759, from *.*.P001 through *.*.P836."
}
],
"impacts": [
{
"capecId": "CAPEC-240",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-240 Resource Injection"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-843",
"description": "CWE-843: Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-02-13T18:54:41.167Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Access of Resource Using Incompatible Type in Postscript interpreter",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2024-11346",
"datePublished": "2025-02-13T18:54:41.167Z",
"dateReserved": "2024-11-18T16:10:42.142Z",
"dateUpdated": "2025-02-13T19:17:04.920Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2024-11346\",\"sourceIdentifier\":\"7bc73191-a2b6-4c63-9918-753964601853\",\"published\":\"2025-02-13T19:15:13.370\",\"lastModified\":\"2025-02-13T19:15:13.370\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\": Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027) vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from *.*.P001 through *.*.P233, from *.*.P001 through *.*.P759, from *.*.P001 through *.*.P836.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"7bc73191-a2b6-4c63-9918-753964601853\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":3.4}]},\"weaknesses\":[{\"source\":\"7bc73191-a2b6-4c63-9918-753964601853\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-843\"}]}],\"references\":[{\"url\":\"https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html\",\"source\":\"7bc73191-a2b6-4c63-9918-753964601853\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-11346\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-02-13T19:16:38.233943Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-13T19:17:00.438Z\"}}], \"cna\": {\"title\": \"Access of Resource Using Incompatible Type in Postscript interpreter\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"impacts\": [{\"capecId\": \"CAPEC-240\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-240 Resource Injection\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"LOW\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Lexmark International\", \"modules\": [\"Postscript interpreter\"], \"product\": \"CX, XC, CS, MS, MX, XM, et. al.\", \"versions\": [{\"status\": \"affected\", \"changes\": [{\"at\": \"CXTLS.240.077 - CXTLS.240.199\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTLS.240.076\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTLS.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"CXTLS.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXTLS.240.077 - MXTLS.240.199\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXTLS.240.076\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXTLS.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"MXTLS.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTLS.240.077 - CSTLS.240.199\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTLS.240.076\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTLS.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"CSTLS.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSNSN.240.043 - MSNSN.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MSNSN.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSNSN.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"MSNSN.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSTSN.240.043 - MSTSN.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MSTSN.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSTSN.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"MSTSN.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXTSN.240.043 - MXTSN.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXTSN.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXTSN.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"MXTSN.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSNGV.240.043 - CSNGV.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSNGV.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSNGV.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"CSNGV.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTGV.240.043 - CSTGV.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTGV.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTGV.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"CSTGV.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTGV.240.043 - CXTGV.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTGV.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTGV.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"CXTGV.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTPC.240.043 - CXTPC.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTPC.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTPC.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"CXTPC.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTPC.240.043 - CSTPC.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTPC.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTPC.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"CSTPC.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXTCT.240.043 - MXTCT.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXTCT.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXTCT.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"MXTCT.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXTPM.240.043-MXTPM.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXTPM.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXTPM.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"MXTPM.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTMM.240.043-CXTMM.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTMM.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTMM.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"CXTMM.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTMM.240.043 - CSTMM.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTMM.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTMM.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"CSTMM.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTZJ.240.043 - CSTZJ.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTZJ.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTZJ.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"CSTZJ.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSNZJ.240.043 - CSNZJ.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSNZJ.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSNZJ.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"CSNZJ.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTZJ.240.043 - CXTZJ.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTZJ.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTZJ.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"CXTZJ.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXNZJ.240.043 - CXNZJ.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXNZJ.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXNZJ.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"CXNZJ.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSNGM.240.043 - MSNGM.240.069\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MSNGM.240.042\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSNGM.240.201 and later\", \"status\": \"unaffected\"}], \"version\": \"MSNGM.240.200\", \"lessThan\": \"*\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSLSG.230.402 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MSLSG.230.401\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXLSG.230.402 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXLSG.230.401\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSLBD.230.402 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MSLBD.230.401\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXLBD.230.402 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXLBD.230.401\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSLBN.230.402 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSLBN.230.401\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSLBL.230.402 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSLBL.230.401\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXLBN.230.402 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXLBN.230.401\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXLBL.230.402 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXLBL.230.401\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTPP.230.402 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTPP.230.401\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTPP.230.402 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTPP.230.401\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTAT.230.402 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTAT.230.401\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTAT.230.402 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTAT.230.401\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTMH.230.402 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTMH.230.401\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTMH.230.402 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTMH.230.401\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.TL2.P216 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.TL2.P215\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.PR2.P216 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.PR2.P215\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.PR4.P216 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.PR4.P215\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.SB4.P216 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.SB4.P215\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.SB7.P216 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.SB7.P215\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.DN2.P216 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.DN2.P215\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.DN4.P216 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.DN4.P215\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.DN7.P216 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.DN7.P215\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.TU.P216 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.TU.P215\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.SA.P216 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.SA.P215\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.MG.P216 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.MG.P215\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.GM7.P216 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.GM7.P215\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.GM4.P216 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.GM4.P215\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.VY4.P216 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.VY4.P215\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW80.PRL.P258 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW80.PRL.P257\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW80.SB2.P258 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW80.SB2.P257\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW80.VYL.P258 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW80.VYL.P257\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW80.VY2.P258 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW80.VY2.P257\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW80.GM2.P258 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW80.GM2.P257\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \": Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027) vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from *.*.P001 through *.*.P233, from *.*.P001 through *.*.P759, from *.*.P001 through *.*.P836.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \": Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027) vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Resource Injection.\u003cp\u003eThis issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from *.*.P001 through *.*.P233, from *.*.P001 through *.*.P759, from *.*.P001 through *.*.P836.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-843\", \"description\": \"CWE-843: Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"7bc73191-a2b6-4c63-9918-753964601853\", \"shortName\": \"Lexmark\", \"dateUpdated\": \"2025-02-13T18:54:41.167Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2024-11346\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-02-13T19:17:04.920Z\", \"dateReserved\": \"2024-11-18T16:10:42.142Z\", \"assignerOrgId\": \"7bc73191-a2b6-4c63-9918-753964601853\", \"datePublished\": \"2025-02-13T18:54:41.167Z\", \"assignerShortName\": \"Lexmark\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…