Common Weakness Enumeration

CWE-121

Allowed

Stack-based Buffer Overflow

Abstraction: Variant · Status: Draft

API response cwe.mitre.org

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

5232 vulnerabilities reference this CWE, most recent first.

CVE-2023-51618 (GCVE-0-2023-51618)

Vulnerability from cvelistv5 – Published: 2024-05-03 02:15 – Updated: 2024-08-02 22:40
VLAI
Title
D-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability
Summary
D-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd webserver listening on TCP ports 80 and 443. The issue results from the lack of proper validation of a user-supplied string before copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21595.
Severity
6.8 (Medium)
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
  • CWE-121 - Stack-based Buffer Overflow
Assigner
zdi
References
Impacted products
Vendor Product Version
D-Link DIR-X3260 Affected: 1.04B01
Create a notification for this product.
dlink dir-x3260 Affected: 1.04b01
    cpe:2.3:o:dlink:dir-x3260:1.04b01:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2024-01-11 21:15
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:dlink:dir-x3260:1.04b01:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dir-x3260",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "1.04b01"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-51618",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-06T14:49:48.641273Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:20:57.453Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:40:33.698Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ZDI-24-038",
            "tags": [
              "x_research-advisory",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-038/"
          },
          {
            "name": "vendor-provided URL",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10365"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "DIR-X3260",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "1.04B01"
            }
          ]
        }
      ],
      "dateAssigned": "2023-12-20T22:02:27.367Z",
      "datePublic": "2024-01-11T21:15:53.505Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "D-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd webserver listening on TCP ports 80 and 443. The issue results from the lack of proper validation of a user-supplied string before copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21595."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121: Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-03T02:15:41.099Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-038",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-038/"
        },
        {
          "name": "vendor-provided URL",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10365"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Peter Girnus, Nicholas Zubrisky"
      },
      "title": "D-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2023-51618",
    "datePublished": "2024-05-03T02:15:41.099Z",
    "dateReserved": "2023-12-20T21:52:34.959Z",
    "dateUpdated": "2024-08-02T22:40:33.698Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-51617 (GCVE-0-2023-51617)

Vulnerability from cvelistv5 – Published: 2024-05-03 02:15 – Updated: 2024-08-02 22:40
VLAI
Title
D-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability
Summary
D-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd webserver listening on TCP ports 80 and 443. The issue results from the lack of proper validation of a user-supplied string before copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21594.
Severity
6.8 (Medium)
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
  • CWE-121 - Stack-based Buffer Overflow
Assigner
zdi
References
Impacted products
Vendor Product Version
D-Link DIR-X3260 Affected: 1.04B01
Create a notification for this product.
dlink dir-x3260 Affected: 1.04b01
    cpe:2.3:o:dlink:dir-x3260:1.04b01:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2024-01-11 21:15
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:dlink:dir-x3260:1.04b01:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dir-x3260",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "1.04b01"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-51617",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-06T14:49:55.786735Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:20:14.476Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:40:33.809Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ZDI-24-037",
            "tags": [
              "x_research-advisory",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-037/"
          },
          {
            "name": "vendor-provided URL",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10365"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "DIR-X3260",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "1.04B01"
            }
          ]
        }
      ],
      "dateAssigned": "2023-12-20T22:02:27.357Z",
      "datePublic": "2024-01-11T21:15:49.345Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "D-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd webserver listening on TCP ports 80 and 443. The issue results from the lack of proper validation of a user-supplied string before copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21594."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121: Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-03T02:15:40.388Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-037",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-037/"
        },
        {
          "name": "vendor-provided URL",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10365"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Peter Girnus, Nicholas Zubrisky"
      },
      "title": "D-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2023-51617",
    "datePublished": "2024-05-03T02:15:40.388Z",
    "dateReserved": "2023-12-20T21:52:34.959Z",
    "dateUpdated": "2024-08-02T22:40:33.809Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-51616 (GCVE-0-2023-51616)

Vulnerability from cvelistv5 – Published: 2024-05-03 02:15 – Updated: 2024-08-02 22:40
VLAI
Title
D-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability
Summary
D-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd webserver listening on TCP ports 80 and 443. The issue results from the lack of proper validation of a user-supplied string before copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21593.
Severity
6.8 (Medium)
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
  • CWE-121 - Stack-based Buffer Overflow
Assigner
zdi
References
Impacted products
Vendor Product Version
D-Link DIR-X3260 Affected: 1.04B01
Create a notification for this product.
d-link dir-x3260_firmware Affected: 1.04B01
    cpe:2.3:o:d-link:dir-x3260_firmware:-:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2024-01-11 21:15
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:d-link:dir-x3260_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dir-x3260_firmware",
            "vendor": "d-link",
            "versions": [
              {
                "status": "affected",
                "version": "1.04B01"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-51616",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-03T14:06:30.381557Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:20:20.803Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:40:34.050Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ZDI-24-036",
            "tags": [
              "x_research-advisory",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-036/"
          },
          {
            "name": "vendor-provided URL",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10365"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "DIR-X3260",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "1.04B01"
            }
          ]
        }
      ],
      "dateAssigned": "2023-12-20T22:02:27.351Z",
      "datePublic": "2024-01-11T21:15:42.521Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "D-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd webserver listening on TCP ports 80 and 443. The issue results from the lack of proper validation of a user-supplied string before copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21593."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121: Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-03T02:15:39.659Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-036",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-036/"
        },
        {
          "name": "vendor-provided URL",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10365"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Peter Girnus, Nicholas Zubrisky"
      },
      "title": "D-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2023-51616",
    "datePublished": "2024-05-03T02:15:39.659Z",
    "dateReserved": "2023-12-20T21:52:34.959Z",
    "dateUpdated": "2024-08-02T22:40:34.050Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-51615 (GCVE-0-2023-51615)

Vulnerability from cvelistv5 – Published: 2024-05-03 02:15 – Updated: 2024-08-02 22:40
VLAI
Title
D-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability
Summary
D-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd webserver listening on TCP ports 80 and 443. The issue results from the lack of proper validation of a user-supplied string before copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21592.
Severity
6.8 (Medium)
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
  • CWE-121 - Stack-based Buffer Overflow
Assigner
zdi
References
Impacted products
Vendor Product Version
D-Link DIR-X3260 Affected: 1.04B01
Create a notification for this product.
dlink dir-x3260 Affected: 1.04b01
    cpe:2.3:o:dlink:dir-x3260:1.04b01:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2024-01-11 21:15
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:dlink:dir-x3260:1.04b01:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dir-x3260",
            "vendor": "dlink",
            "versions": [
              {
                "status": "affected",
                "version": "1.04b01"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-51615",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-06T14:50:02.974632Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:20:51.628Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:40:33.821Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ZDI-24-035",
            "tags": [
              "x_research-advisory",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-035/"
          },
          {
            "name": "vendor-provided URL",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10365"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "DIR-X3260",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "1.04B01"
            }
          ]
        }
      ],
      "dateAssigned": "2023-12-20T22:02:27.345Z",
      "datePublic": "2024-01-11T21:15:37.510Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "D-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd webserver listening on TCP ports 80 and 443. The issue results from the lack of proper validation of a user-supplied string before copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21592."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121: Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-03T02:15:38.910Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-035",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-035/"
        },
        {
          "name": "vendor-provided URL",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10365"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Peter Girnus, Nicholas Zubrisky"
      },
      "title": "D-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2023-51615",
    "datePublished": "2024-05-03T02:15:38.910Z",
    "dateReserved": "2023-12-20T21:52:34.959Z",
    "dateUpdated": "2024-08-02T22:40:33.821Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-51614 (GCVE-0-2023-51614)

Vulnerability from cvelistv5 – Published: 2024-05-03 02:15 – Updated: 2024-08-02 22:40
VLAI
Title
D-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability
Summary
D-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd webserver listening on TCP ports 80 and 443. The issue results from the lack of proper validation of a user-supplied string before copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21591.
Severity
6.8 (Medium)
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
  • CWE-121 - Stack-based Buffer Overflow
Assigner
zdi
References
Impacted products
Vendor Product Version
D-Link DIR-X3260 Affected: 1.04B01
Create a notification for this product.
d-link dir-x3260_firmware Affected: 1.04B01
    cpe:2.3:o:d-link:dir-x3260_firmware:-:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2024-01-11 21:15
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:d-link:dir-x3260_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dir-x3260_firmware",
            "vendor": "d-link",
            "versions": [
              {
                "status": "affected",
                "version": "1.04B01"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-51614",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-03T16:26:28.811304Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:21:02.665Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:40:33.762Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ZDI-24-034",
            "tags": [
              "x_research-advisory",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-034/"
          },
          {
            "name": "vendor-provided URL",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10365"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "DIR-X3260",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "1.04B01"
            }
          ]
        }
      ],
      "dateAssigned": "2023-12-20T22:02:27.339Z",
      "datePublic": "2024-01-11T21:15:31.330Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "D-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd webserver listening on TCP ports 80 and 443. The issue results from the lack of proper validation of a user-supplied string before copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21591."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121: Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-03T02:15:38.144Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-034",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-034/"
        },
        {
          "name": "vendor-provided URL",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10365"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Peter Girnus, Nicholas Zubrisky"
      },
      "title": "D-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2023-51614",
    "datePublished": "2024-05-03T02:15:38.144Z",
    "dateReserved": "2023-12-20T21:52:34.959Z",
    "dateUpdated": "2024-08-02T22:40:33.762Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-51613 (GCVE-0-2023-51613)

Vulnerability from cvelistv5 – Published: 2024-05-03 02:15 – Updated: 2024-08-02 22:40
VLAI
Title
D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability
Summary
D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd webserver listening on TCP ports 80 and 443. The issue results from the lack of proper validation of a user-supplied string before copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21590.
Severity
6.8 (Medium)
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
  • CWE-121 - Stack-based Buffer Overflow
Assigner
zdi
References
Impacted products
Vendor Product Version
D-Link DIR-X3260 Affected: 1.04B01
Create a notification for this product.
d-link dir-x3260_firmware Affected: - , ≤ 1.02b02 (custom)
    cpe:2.3:o:d-link:dir-x3260_firmware:-:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2024-01-11 21:15
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:d-link:dir-x3260_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dir-x3260_firmware",
            "vendor": "d-link",
            "versions": [
              {
                "lessThanOrEqual": "1.02b02",
                "status": "affected",
                "version": "-",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-51613",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-03T18:40:12.409271Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:20:39.268Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:40:33.839Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ZDI-24-033",
            "tags": [
              "x_research-advisory",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-033/"
          },
          {
            "name": "vendor-provided URL",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10365"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "DIR-X3260",
          "vendor": "D-Link",
          "versions": [
            {
              "status": "affected",
              "version": "1.04B01"
            }
          ]
        }
      ],
      "dateAssigned": "2023-12-20T22:02:27.332Z",
      "datePublic": "2024-01-11T21:15:26.711Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the prog.cgi binary, which handles HNAP requests made to the lighttpd webserver listening on TCP ports 80 and 443. The issue results from the lack of proper validation of a user-supplied string before copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-21590."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121: Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-05-03T02:15:37.383Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-033",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-033/"
        },
        {
          "name": "vendor-provided URL",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10365"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Peter Girnus, Nicholas Zubrisky"
      },
      "title": "D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2023-51613",
    "datePublished": "2024-05-03T02:15:37.383Z",
    "dateReserved": "2023-12-20T21:52:34.958Z",
    "dateUpdated": "2024-08-02T22:40:33.839Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-51566 (GCVE-0-2023-51566)

Vulnerability from cvelistv5 – Published: 2024-05-03 02:15 – Updated: 2024-09-18 18:30
VLAI
Title
Kofax Power PDF OXPS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
Summary
Kofax Power PDF OXPS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of OXPS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21980.
Severity
7.8 (High)
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
  • CWE-121 - Stack-based Buffer Overflow
Assigner
zdi
References
Impacted products
Vendor Product Version
Kofax Power PDF Affected: 5.0.0.57 (5.0.0.10.0.23307)
Create a notification for this product.
kofax power_pdf Affected: 0 , < 5.0.0.16 (custom)
    cpe:2.3:a:kofax:power_pdf:*:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2024-01-04 20:46
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:kofax:power_pdf:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "power_pdf",
            "vendor": "kofax",
            "versions": [
              {
                "lessThan": "5.0.0.16",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-51566",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-06T13:45:39.718716Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:20:57.979Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:40:33.905Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ZDI-24-004",
            "tags": [
              "x_research-advisory",
              "x_transferred"
            ],
            "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-004/"
          },
          {
            "name": "vendor-provided URL",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://docshield.kofax.com/PowerPDF/en_US/5.0.0-3uoz7ssq2b/print/ReadMe-KofaxPowerPDFAdvanced-5.0.0.16.htm"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Power PDF",
          "vendor": "Kofax",
          "versions": [
            {
              "status": "affected",
              "version": "5.0.0.57 (5.0.0.10.0.23307)"
            }
          ]
        }
      ],
      "dateAssigned": "2023-12-20T20:45:49.208Z",
      "datePublic": "2024-01-04T20:46:03.099Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Kofax Power PDF OXPS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of OXPS files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21980."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121: Stack-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-18T18:30:40.595Z",
        "orgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
        "shortName": "zdi"
      },
      "references": [
        {
          "name": "ZDI-24-004",
          "tags": [
            "x_research-advisory"
          ],
          "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-004/"
        },
        {
          "name": "vendor-provided URL",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://docshield.kofax.com/PowerPDF/en_US/5.0.0-3uoz7ssq2b/print/ReadMe-KofaxPowerPDFAdvanced-5.0.0.16.htm"
        }
      ],
      "source": {
        "lang": "en",
        "value": "Mat Powell of Trend Micro Zero Day Initiative"
      },
      "title": "Kofax Power PDF OXPS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "99f1926a-a320-47d8-bbb5-42feb611262e",
    "assignerShortName": "zdi",
    "cveId": "CVE-2023-51566",
    "datePublished": "2024-05-03T02:15:04.621Z",
    "dateReserved": "2023-12-20T20:38:20.866Z",
    "dateUpdated": "2024-09-18T18:30:40.595Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-51367 (GCVE-0-2023-51367)

Vulnerability from cvelistv5 – Published: 2024-09-06 16:26 – Updated: 2024-09-06 17:39
VLAI
Title
QTS, QuTS hero
Summary
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and later QuTS hero h5.1.6.2734 build 20240414 and later
Severity
5.4 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
Impacted products
Vendor Product Version
QNAP Systems Inc. QTS Affected: 5.1.x , < 5.1.6.2722 build 20240402 (custom)
Create a notification for this product.
QNAP Systems Inc. QuTS hero Unaffected: h5.1.x , < h5.1.6.2734 build 20240414 (custom)
Create a notification for this product.
Credits
chumen77
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-51367",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-06T17:39:51.384865Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-06T17:39:58.509Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "QTS",
          "vendor": "QNAP Systems Inc.",
          "versions": [
            {
              "lessThan": "5.1.6.2722 build 20240402",
              "status": "affected",
              "version": "5.1.x",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "QuTS hero",
          "vendor": "QNAP Systems Inc.",
          "versions": [
            {
              "lessThan": "h5.1.6.2734 build 20240414",
              "status": "unaffected",
              "version": "h5.1.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "chumen77"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network.\u003cbr\u003e\u003cbr\u003eWe have already fixed the vulnerability in the following versions:\u003cbr\u003eQTS 5.1.6.2722 build 20240402 and later\u003cbr\u003eQuTS hero h5.1.6.2734 build 20240414 and later\u003cbr\u003e"
            }
          ],
          "value": "A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.1.6.2722 build 20240402 and later\nQuTS hero h5.1.6.2734 build 20240414 and later"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-121",
              "description": "CWE-121",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-09-06T16:26:10.766Z",
        "orgId": "2fd009eb-170a-4625-932b-17a53af1051f",
        "shortName": "qnap"
      },
      "references": [
        {
          "url": "https://www.qnap.com/en/security-advisory/qsa-24-20"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "We have already fixed the vulnerability in the following versions:\u003cbr\u003eQTS 5.1.6.2722 build 20240402 and later\u003cbr\u003eQuTS hero h5.1.6.2734 build 20240414 and later\u003cbr\u003e"
            }
          ],
          "value": "We have already fixed the vulnerability in the following versions:\nQTS 5.1.6.2722 build 20240402 and later\nQuTS hero h5.1.6.2734 build 20240414 and later"
        }
      ],
      "source": {
        "advisory": "QSA-24-20",
        "discovery": "EXTERNAL"
      },
      "title": "QTS, QuTS hero",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2fd009eb-170a-4625-932b-17a53af1051f",
    "assignerShortName": "qnap",
    "cveId": "CVE-2023-51367",
    "datePublished": "2024-09-06T16:26:10.766Z",
    "dateReserved": "2023-12-18T14:21:13.239Z",
    "dateUpdated": "2024-09-06T17:39:58.509Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-50734 (GCVE-0-2023-50734)

Vulnerability from cvelistv5 – Published: 2024-02-28 01:47 – Updated: 2024-08-23 14:52
VLAI
Title
A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.
Summary
A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
Severity
9 (Critical)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
References
Impacted products
Vendor Product Version
Lexmark various Affected: various
Create a notification for this product.
lexmark cxtpc_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cstpc_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mxtct_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mxtpm_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cxtmm_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mslsg_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mxlsg_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mslbd_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mxlbd_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark msngm_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mstgm_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:mstgm_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mxngm_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark ms315 Affected: 0 , ≤ lw90.tl2.p205 (custom)
    cpe:2.3:h:lexmark:ms417:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms415:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms315:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark ms610dn Affected: 0 , ≤ lw90.pr2.p205 (custom)
    cpe:2.3:h:lexmark:m3150dn:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:m1145:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:m1140\+:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms617:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms517:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms510:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms610dn:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mxtgm_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark msngw_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mstgw_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mxtgw_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cslbn_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cslbl_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cxlbn_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cxlbl_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cstzj_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark csnzj_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cxtzj_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cxnzj_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cxnzj_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cxtpp_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cstpp_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cstpp_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cstat_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cstat_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cxtat_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cxtat_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cstmh_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cstmh_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cxtmh_firmware Affected: 0 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cxtmh_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark msnsn_firmware Affected: 0 , ≤ 222.030 (custom)
Affected: 230.001 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:msnsn_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mstsn_firmware Affected: 0 , ≤ 222.030 (custom)
Affected: 230.001 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:mstsn_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mxtsn_firmware Affected: 0 , ≤ 222.030 (custom)
Affected: 230.001 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:mxtsn_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark csngv_firmware Affected: 0 , ≤ 222.030 (custom)
Affected: 230.001 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:csngv_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cstgv_firmware Affected: 0 , ≤ 222.030 (custom)
Affected: 230.001 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cstgv_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cxtgv_firmware Affected: 0 , ≤ 222.030 (custom)
Affected: 230.001 , ≤ 230.041 (custom)
Affected: 230.075 , ≤ 230.078 (custom)
Affected: 230.200 , ≤ 230.203 (custom)
    cpe:2.3:o:lexmark:cxtgv_firmware:*:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark ms610de Affected: 0 , ≤ lw90.pr4.p205 (custom)
    cpe:2.3:h:lexmark:m3150de:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms610de:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mx410 Affected: 0 , ≤ lw90.sb4.p205 (custom)
    cpe:2.3:h:lexmark:xm1145:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:xm1140:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx517:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx511:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx510:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx417:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx410:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mx610 Affected: 0 , ≤ lw90.sb7.p205 (custom)
    cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark ms711 Affected: 0 , ≤ lw90.dn2.p205 (custom)
    cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark ms810de Affected: 0 , ≤ lw90.dn4.p205 (custom)
    cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark ms812de Affected: 0 , ≤ lw90.dn7.p205 (custom)
    cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mx710 Affected: 0 , ≤ lw90.tu.p205 (custom)
    cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark ms911 Affected: 0 , ≤ lw90.sa.p205 (custom)
    cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mx910 Affected: 0 , ≤ lw90.mg.p205 (custom)
    cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mx6500e Affected: 0 , ≤ lw90.jd.p205 (custom)
    cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cs510 Affected: 0 , ≤ lw90.vy4.p205 (custom)
    cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cx410 Affected: 0 , ≤ lw90.gm4.p205 (custom)
    cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cx510 Affected: 0 , ≤ lw90.gm7.p205 (custom)
    cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark ms310 Affected: 0 , ≤ lw80.prl.p249 (custom)
    cpe:2.3:h:lexmark:m1140:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms410:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms317:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms312:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:ms310:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark mx310 Affected: 0 , ≤ lw80.sb2.p249 (custom)
    cpe:2.3:h:lexmark:xm1135:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx317:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:mx310:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cs310 Affected: 0 , ≤ lw80.vyl.p249 (custom)
    cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cs410 Affected: 0 , ≤ lw80.vy2.p249 (custom)
    cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark cx310 Affected: 0 , ≤ lw80.gm2.p249 (custom)
    cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark c746 Affected: 0 , ≤ lhs60.cm2.p763 (custom)
    cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark c748 Affected: 0 , ≤ lhs60.cm4.p763 (custom)
    cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark c792 Affected: 0 , ≤ lhs60.hc.p763 (custom)
    cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark c925 Affected: 0 , ≤ lhs60.hv.p763 (custom)
    cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark c950 Affected: 0 , ≤ lhs60.tp.p763 (custom)
    cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark x548 Affected: 0 , ≤ lhs60.vk.p763 (custom)
    cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark x746 Affected: 0 , ≤ lhs60.ny.p763 (custom)
    cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark x792 Affected: 0 , ≤ lhs60.mr.p763 (custom)
    cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark x925 Affected: 0 , ≤ lhs60.hk.p763 (custom)
    cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark x950 Affected: 0 , ≤ lhs60.tq.p763 (custom)
    cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:*
    cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:*
 Create a notification for this product.
lexmark 6500e Affected: 0 , ≤ lhs60.jr.p763 (custom)
    cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:*
 Create a notification for this product.
Date Public
2024-01-19 05:00
Credits
“Team Viettel” working with Trend Micro’s Zero Day Initiative (ZDI)
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:16:47.196Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cxtpc_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cstpc_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mxtct_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mxtpm_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cxtmm_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mslsg_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mxlsg_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mslbd_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mxlbd_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "msngm_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:mstgm_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mstgm_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mxngm_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:ms417:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms415:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms315:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ms315",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.tl2.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:m3150dn:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:m1145:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:m1140\\+:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms617:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms517:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms510:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms610dn:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ms610dn",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.pr2.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mxtgm_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "msngw_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mstgw_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mxtgw_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cslbn_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cslbl_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cxlbn_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cxlbl_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cstzj_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "csnzj_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cxtzj_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cxnzj_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cxnzj_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cxtpp_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cstpp_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cstpp_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cstat_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cstat_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cxtat_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cxtat_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cstmh_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cstmh_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cxtmh_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cxtmh_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:msnsn_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "msnsn_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "222.030",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "230.001",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:mstsn_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mstsn_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "222.030",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "230.001",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:mxtsn_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mxtsn_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "222.030",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "230.001",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:csngv_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "csngv_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "222.030",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "230.001",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cstgv_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cstgv_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "222.030",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "230.001",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lexmark:cxtgv_firmware:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cxtgv_firmware",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "222.030",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.041",
                "status": "affected",
                "version": "230.001",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.078",
                "status": "affected",
                "version": "230.075",
                "versionType": "custom"
              },
              {
                "lessThanOrEqual": "230.203",
                "status": "affected",
                "version": "230.200",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:m3150de:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms610de:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ms610de",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.pr4.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:xm1145:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:xm1140:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx517:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx511:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx510:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx417:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx410:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mx410",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.sb4.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mx610",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.sb7.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ms711",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.dn2.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ms810de",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.dn4.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ms812de",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.dn7.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mx710",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.tu.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ms911",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.sa.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mx910",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.mg.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mx6500e",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.jd.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cs510",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.vy4.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cx410",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.gm4.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cx510",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw90.gm7.p205",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:m1140:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms410:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms317:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms312:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:ms310:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "ms310",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw80.prl.p249",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:xm1135:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx317:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:mx310:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "mx310",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw80.sb2.p249",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cs310",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw80.vyl.p249",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cs410",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw80.vy2.p249",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "cx310",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lw80.gm2.p249",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "c746",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lhs60.cm2.p763",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "c748",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lhs60.cm4.p763",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "c792",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lhs60.hc.p763",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "c925",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lhs60.hv.p763",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "c950",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lhs60.tp.p763",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "x548",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lhs60.vk.p763",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "x746",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lhs60.ny.p763",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "x792",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lhs60.mr.p763",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "x925",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lhs60.hk.p763",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:*",
              "cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "x950",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lhs60.tq.p763",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unaffected",
            "product": "6500e",
            "vendor": "lexmark",
            "versions": [
              {
                "lessThanOrEqual": "lhs60.jr.p763",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-50734",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-22T20:05:20.232525Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-23T14:52:38.870Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "various",
          "vendor": "Lexmark",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "\u201cTeam Viettel\u201d working with Trend Micro\u2019s Zero Day Initiative (ZDI)"
        }
      ],
      "datePublic": "2024-01-19T05:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.\u003cbr\u003e"
            }
          ],
          "value": "A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.\n"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-02-28T01:47:47.211Z",
        "orgId": "7bc73191-a2b6-4c63-9918-753964601853",
        "shortName": "Lexmark"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Lexmark recommends a firmware update if your device has affected firmware.\u003cbr\u003e"
            }
          ],
          "value": "Lexmark recommends a firmware update if your device has affected firmware.\n"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
    "assignerShortName": "Lexmark",
    "cveId": "CVE-2023-50734",
    "datePublished": "2024-02-28T01:47:47.211Z",
    "dateReserved": "2023-12-11T20:00:38.336Z",
    "dateUpdated": "2024-08-23T14:52:38.870Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-50362 (GCVE-0-2023-50362)

Vulnerability from cvelistv5 – Published: 2024-04-26 15:01 – Updated: 2024-08-02 22:16
VLAI
Title
QTS, QuTS hero
Summary
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and later QuTS hero h5.1.6.2734 build 20240414 and later
Severity
5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
References
Impacted products
Vendor Product Version
QNAP Systems Inc. QTS Affected: 5.1.x , < 5.1.6.2722 build 20240402 (custom)
Create a notification for this product.
QNAP Systems Inc. QuTS hero Affected: h5.1.x , < h5.1.6.2734 build 20240414 (custom)
Create a notification for this product.
qnap qts Affected: 5.1.x , < 5.1.6.2722 build 20240402 (custom)
    cpe:2.3:o:qnap:qts:-:*:*:*:*:*:*:*
 Create a notification for this product.
qnap quts_hero Affected: h5.1.x , < h5.1.6.2734 build 20240414 (custom)
    cpe:2.3:o:qnap:quts_hero:-:*:*:*:*:*:*:*
 Create a notification for this product.
Credits
Aliz Hammond of watchTowr
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:qnap:qts:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "qts",
            "vendor": "qnap",
            "versions": [
              {
                "lessThan": "5.1.6.2722 build 20240402",
                "status": "affected",
                "version": "5.1.x",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:qnap:quts_hero:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "quts_hero",
            "vendor": "qnap",
            "versions": [
              {
                "lessThan": "h5.1.6.2734 build 20240414 ",
                "status": "affected",
                "version": "h5.1.x",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-50362",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-26T16:22:19.924588Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:17:39.509Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T22:16:46.740Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.qnap.com/en/security-advisory/qsa-24-20"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "QTS",
          "vendor": "QNAP Systems Inc.",
          "versions": [
            {
              "lessThan": "5.1.6.2722 build 20240402",
              "status": "affected",
              "version": "5.1.x",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "QuTS hero",
          "vendor": "QNAP Systems Inc.",
          "versions": [
            {
              "lessThan": "h5.1.6.2734 build 20240414",
              "status": "affected",
              "version": "h5.1.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Aliz Hammond of watchTowr"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network.\u003cbr\u003e\u003cbr\u003eWe have already fixed the vulnerability in the following versions:\u003cbr\u003eQTS 5.1.6.2722 build 20240402 and later\u003cbr\u003eQuTS hero h5.1.6.2734 build 20240414 and later\u003cbr\u003e"
            }
          ],
          "value": "A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.1.6.2722 build 20240402 and later\nQuTS hero h5.1.6.2734 build 20240414 and later\n"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-120",
              "description": "CWE-120",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-121",
              "description": "CWE-121",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-26T15:01:20.310Z",
        "orgId": "2fd009eb-170a-4625-932b-17a53af1051f",
        "shortName": "qnap"
      },
      "references": [
        {
          "url": "https://www.qnap.com/en/security-advisory/qsa-24-20"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "We have already fixed the vulnerability in the following versions:\u003cbr\u003eQTS 5.1.6.2722 build 20240402 and later\u003cbr\u003eQuTS hero h5.1.6.2734 build 20240414 and later\u003cbr\u003e"
            }
          ],
          "value": "We have already fixed the vulnerability in the following versions:\nQTS 5.1.6.2722 build 20240402 and later\nQuTS hero h5.1.6.2734 build 20240414 and later\n"
        }
      ],
      "source": {
        "advisory": "QSA-24-20",
        "discovery": "EXTERNAL"
      },
      "title": "QTS, QuTS hero",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2fd009eb-170a-4625-932b-17a53af1051f",
    "assignerShortName": "qnap",
    "cveId": "CVE-2023-50362",
    "datePublished": "2024-04-26T15:01:20.310Z",
    "dateReserved": "2023-12-07T08:52:25.584Z",
    "dateUpdated": "2024-08-02T22:16:46.740Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}
Mitigation MIT-10
Operation Build and Compilation

Strategy: Environment Hardening

  • Use automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking.
  • D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses canary-based detection in detail.
Mitigation
Architecture and Design

Use an abstraction library to abstract away risky APIs. Not a complete solution.

Mitigation
Implementation

Implement and perform bounds checking on input.

Mitigation
Implementation

Do not use dangerous functions such as gets. Use safer, equivalent functions which check for boundary errors.

Mitigation MIT-11
Operation Build and Compilation

Strategy: Environment Hardening

  • Run or compile the software using features or extensions that randomly arrange the positions of a program's executable and libraries in memory. Because this makes the addresses unpredictable, it can prevent an attacker from reliably jumping to exploitable code.
  • Examples include Address Space Layout Randomization (ASLR) [REF-58] [REF-60] and Position-Independent Executables (PIE) [REF-64]. Imported modules may be similarly realigned if their default memory addresses conflict with other modules, in a process known as "rebasing" (for Windows) and "prelinking" (for Linux) [REF-1332] using randomly generated addresses. ASLR for libraries cannot be used in conjunction with prelink since it would require relocating the libraries at run-time, defeating the whole purpose of prelinking.
  • For more information on these techniques see D3-SAOR (Segment Address Offset Randomization) from D3FEND [REF-1335].

No CAPEC attack patterns related to this CWE.

← Back to the CWE list