Search
Find a vulnerability
Search criteria
145 vulnerabilities by lexmark
CVE-2025-65081 (GCVE-0-2025-65081)
Vulnerability from nvd – Published: 2026-02-03 20:39 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Out-of-bounds read vulnerability in Postscript interpreter
Summary
An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.506
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65081",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-04T04:56:08.400670Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:23.914Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.506",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-153",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-153 Input Data Manipulation"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:39:14.501Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Out-of-bounds read vulnerability in Postscript interpreter",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65081",
"datePublished": "2026-02-03T20:39:14.501Z",
"dateReserved": "2025-11-17T13:56:38.589Z",
"dateUpdated": "2026-02-26T15:04:23.914Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65080 (GCVE-0-2025-65080)
Vulnerability from nvd – Published: 2026-02-03 20:35 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Type confusion vulnerability in Postscript interpreter
Summary
A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.506
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65080",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-04T04:56:07.187232Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:24.195Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.506",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-153",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-153 Input Data Manipulation"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-843",
"description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:35:54.592Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Type confusion vulnerability in Postscript interpreter",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65080",
"datePublished": "2026-02-03T20:35:54.592Z",
"dateReserved": "2025-11-17T13:56:38.589Z",
"dateUpdated": "2026-02-26T15:04:24.195Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65079 (GCVE-0-2025-65079)
Vulnerability from nvd – Published: 2026-02-03 20:23 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Heap-based buffer overflow vulnerability in Postscript interpreter
Summary
A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.506
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65079",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-04T04:56:06.044346Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:24.490Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.506",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:23:24.405Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Heap-based buffer overflow vulnerability in Postscript interpreter",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65079",
"datePublished": "2026-02-03T20:23:24.405Z",
"dateReserved": "2025-11-17T13:56:38.589Z",
"dateUpdated": "2026-02-26T15:04:24.490Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65078 (GCVE-0-2025-65078)
Vulnerability from nvd – Published: 2026-02-03 20:51 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Untrusted search path vulnerability in Embedded Solutions Framework
Summary
An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-426 - Untrusted Search Path
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.507
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65078",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-06T04:55:26.714128Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:23.262Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.507",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code."
}
],
"value": "An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-38",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-38 Leveraging/Manipulating Configuration File Search Paths"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-426",
"description": "CWE-426 Untrusted Search Path",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:51:20.556Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Untrusted search path vulnerability in Embedded Solutions Framework",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65078",
"datePublished": "2026-02-03T20:51:20.556Z",
"dateReserved": "2025-11-17T13:56:38.588Z",
"dateUpdated": "2026-02-26T15:04:23.262Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65077 (GCVE-0-2025-65077)
Vulnerability from nvd – Published: 2026-02-03 20:44 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Relative path traversal vulnerability in Embedded Solutions Framework
Summary
A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.507
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65077",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-06T04:55:27.610829Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:23.610Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.507",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-139",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-139 Relative Path Traversal"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:44:32.330Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Relative path traversal vulnerability in Embedded Solutions Framework",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65077",
"datePublished": "2026-02-03T20:44:32.330Z",
"dateReserved": "2025-11-17T13:56:38.587Z",
"dateUpdated": "2026-02-26T15:04:23.610Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-9269 (GCVE-0-2025-9269)
Vulnerability from nvd – Published: 2025-09-09 17:21 – Updated: 2025-09-29 15:34
VLAI
EPSS
VEX
Title
Server-Side Request Forgery (SSRF) vulnerability found in embedded web server
Summary
A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-918 - Server-Side Request Forgery (SSRF)
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. |
Affected:
0 , ≤ CXTLS.250.199
(custom)
Affected: 0 , ≤ MXTLS.250.199 (custom) Affected: 0 , ≤ CSTLS.250.199 (custom) Affected: 0 , ≤ MSNSN.250.199 (custom) Affected: 0 , ≤ MSTSN.250.199 (custom) Affected: 0 , ≤ MXTSN.250.199 (custom) Affected: 0 , ≤ CSNGV.250.199 (custom) Affected: 0 , ≤ CSTGV.250.199 (custom) Affected: 0 , ≤ CXTGV.250.199 (custom) Affected: 0 , ≤ CXTPC.250.199 (custom) Affected: 0 , ≤ CSTPC.250.199 (custom) Affected: 0 , ≤ MXTCT.250.199 (custom) Affected: 0 , ≤ MXTPM.250.199 (custom) Affected: 0 , ≤ CXTMM.250.199 (custom) Affected: 0 , ≤ CSTMM.250.199 (custom) Affected: 0 , ≤ MSNGM.250.199 (custom) Affected: 0 , ≤ MSTGM.250.199 (custom) Affected: 0 , ≤ MXNGM.250.199 (custom) Affected: 0 , ≤ MXTGM.250.199 (custom) Affected: 0 , ≤ MSNGW.250.199 (custom) Affected: 0 , ≤ MSTGW.250.199 (custom) Affected: 0 , ≤ MXTGW.250.199 (custom) Affected: 0 , ≤ CSTZJ.250.199 (custom) Affected: 0 , ≤ CSNZJ.250.199 (custom) Affected: 0 , ≤ CXTZJ.250.199 (custom) Affected: 0 , ≤ CXNZJ.250.199 (custom) Affected: 0 , ≤ MSLSG.230.466 (custom) Affected: 0 , ≤ MXLSG.230.466 (custom) Affected: 0 , ≤ MSLBD.230.466 (custom) Affected: 0 , ≤ MXLBD.230.466 (custom) Affected: 0 , ≤ CSLBN.230.466 (custom) Affected: 0 , ≤ CSLBL.230.466 (custom) Affected: 0 , ≤ CXLBN.230.466 (custom) Affected: 0 , ≤ CXLBL.230.466 (custom) Affected: 0 , ≤ CXTPP.230.466 (custom) Affected: 0 , ≤ CSTPP.230.466 (custom) Affected: 0 , ≤ CSTAT.230.466 (custom) Affected: 0 , ≤ CXTAT.230.466 (custom) Affected: 0 , ≤ CSTMH.230.466 (custom) Affected: 0 , ≤ CXTMH.230.466 (custom) Affected: 0 , ≤ LW90.TL2.P224 (custom) Affected: 0 , ≤ LW90.PR2.P224 (custom) Affected: 0 , ≤ LW90.PR4.P224 (custom) Affected: 0 , ≤ LW90.SB4.P224 (custom) Affected: 0 , ≤ LW90.SB7.P224 (custom) Affected: 0 , ≤ LW90.DN2.P224 (custom) Affected: 0 , ≤ LW90.DN4.P224 (custom) Affected: 0 , ≤ LW90.DN7.P224 (custom) Affected: 0 , ≤ LW90.TU.P224 (custom) Affected: 0 , ≤ LW90.SA.P224 (custom) Affected: 0 , ≤ LW90.MG.P224 (custom) Affected: 0 , ≤ LW90.GM7.P224 (custom) Affected: 0 , ≤ LW90.GM4.P224 (custom) Affected: 0 , ≤ LW90.VY4.P224 (custom) Affected: 0 , ≤ LW80.PRL.P260 (custom) Affected: 0 , ≤ LW80.SB2.P260 (custom) Affected: 0 , ≤ LW80.VYL.P260 (custom) Affected: 0 , ≤ LW80.VY2.P260 (custom) Affected: 0 , ≤ LW80.GM2.P260 (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-9269",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-09-09T17:43:57.556819Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-09-09T18:36:21.085Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"webserver"
],
"product": "CX, XC, CS, MS, MX, XM, et. al.",
"vendor": "Lexmark",
"versions": [
{
"changes": [
{
"at": "CXTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPC.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPC.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPC.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPC.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTCT.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTCT.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTPM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTPM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXNGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXNGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXNZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXNZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLSG.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLSG.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLSG.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLSG.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLBD.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLBD.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLBD.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLBD.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBN.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBN.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBL.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBL.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBN.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBN.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBL.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBL.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPP.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPP.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPP.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPP.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTAT.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTAT.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTAT.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTAT.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMH.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMH.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMH.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMH.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TL2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TL2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TU.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TU.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SA.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SA.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.MG.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.MG.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.VY4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.VY4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.PRL.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.PRL.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.SB2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.SB2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VYL.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VYL.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VY2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VY2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.GM2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.GM2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server.\u0026nbsp;Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device."
}
],
"value": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server.\u00a0Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device."
}
],
"impacts": [
{
"capecId": "CAPEC-101",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-101 Server Side Include (SSI) Injection"
}
]
},
{
"capecId": "CAPEC-33",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-33: HTTP Request Smuggling"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918: Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-09-29T15:34:06.094Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Server-Side Request Forgery (SSRF) vulnerability found in embedded web server",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-9269",
"datePublished": "2025-09-09T17:21:36.589Z",
"dateReserved": "2025-08-20T15:10:24.655Z",
"dateUpdated": "2025-09-29T15:34:06.094Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-4046 (GCVE-0-2025-4046)
Vulnerability from nvd – Published: 2025-08-19 13:12 – Updated: 2026-02-26 17:48
VLAI
EPSS
VEX
Title
Missing Authorization in Lexmark Cloud Services badge management
Summary
A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization
Severity
8.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | Lexmark Cloud Services |
Affected:
0
|
Date Public
2025-08-18 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-4046",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-20T03:56:05.961084Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T17:48:28.920Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Lexmark Cloud Services",
"vendor": "Lexmark",
"versions": [
{
"status": "affected",
"version": "0"
}
]
}
],
"datePublic": "2025-08-18T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ch4\u003e\n\n\u003c/h4\u003e\u003ch4\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization\u003c/span\u003e\u003c/h4\u003e\n\n\u003cbr\u003e"
}
],
"value": "A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization"
}
],
"impacts": [
{
"capecId": "CAPEC-58",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-58: Restful Privilege Elevation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-19T13:12:28.574Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Missing Authorization in Lexmark Cloud Services badge management",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-4046",
"datePublished": "2025-08-19T13:12:28.574Z",
"dateReserved": "2025-04-28T17:55:12.343Z",
"dateUpdated": "2026-02-26T17:48:28.920Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-4044 (GCVE-0-2025-4044)
Vulnerability from nvd – Published: 2025-08-19 13:12 – Updated: 2026-02-26 17:48
VLAI
EPSS
VEX
Title
XML External Entity Injection vulnerability in various Lexmark Universal Drivers
Summary
Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.
Severity
8.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-611 - Improper Restriction of XML External Entity Reference
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | Universal Print Driver |
Affected:
0 , < 3.0.6.0
(custom)
|
|
| Lexmark | Printer Software G2 |
Affected:
0 , < 2.17.0.0
(custom)
|
Date Public
2025-08-18 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-4044",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-20T03:56:04.854966Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T17:48:29.270Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Universal Print Driver",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "3.0.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Printer Software G2",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "2.17.0.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"datePublic": "2025-08-18T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.\u003cbr\u003e"
}
],
"value": "Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL."
}
],
"impacts": [
{
"capecId": "CAPEC-221",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-221 Data Serialization External Entities Blowup"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-611",
"description": "CWE-611 Improper Restriction of XML External Entity Reference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-19T13:12:09.782Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "XML External Entity Injection vulnerability in various Lexmark Universal Drivers",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-4044",
"datePublished": "2025-08-19T13:12:09.782Z",
"dateReserved": "2025-04-28T17:54:55.187Z",
"dateUpdated": "2026-02-26T17:48:29.270Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-1127 (GCVE-0-2025-1127)
Vulnerability from nvd – Published: 2025-02-13 18:49 – Updated: 2025-02-13 19:14
VLAI
EPSS
VEX
Title
Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server
Summary
The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.
Severity
9.1 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. |
Affected:
0 , ≤ CXTLS.240.205
(custom)
Affected: 0 , ≤ MXTLS.240.205 (custom) Affected: 0 , ≤ CSTLS.240.205 (custom) Affected: 0 , ≤ MSNSN.240.205 (custom) Affected: 0 , ≤ MSTSN.240.205 (custom) Affected: 0 , ≤ MXTSN.240.205 (custom) Affected: 0 , ≤ CSNGV.240.205 (custom) Affected: 0 , ≤ CSTGV.240.205 (custom) Affected: 0 , ≤ CXTGV.240.205 (custom) Affected: 0 , ≤ CXTPC.240.205 (custom) Affected: 0 , ≤ CSTPC.240.205 (custom) Affected: 0 , ≤ MXTCT.240.205 (custom) Affected: 0 , ≤ MXTPM.240.205 (custom) Affected: 0 , ≤ CXTMM.240.205 (custom) Affected: 0 , ≤ CSTMM.240.205 (custom) Affected: 0 , ≤ MSNGM.240.205 (custom) Affected: 0 , ≤ MSTGM.240.205 (custom) Affected: 0 , ≤ MXNGM.240.205 (custom) Affected: 0 , ≤ MXTGM.240.205 (custom) Affected: 0 , ≤ MSNGW.240.205 (custom) Affected: 0 , ≤ MSTGW.240.205 (custom) Affected: 0 , ≤ MXTGW.240.205 (custom) Affected: 0 , ≤ CSTZJ.240.205 (custom) Affected: 0 , ≤ CSNZJ.240.205 (custom) Affected: 0 , ≤ CXTZJ.240.205 (custom) Affected: 0 , ≤ CXNZJ.240.205 (custom) Affected: 0 , ≤ MSLSG.240.407 (custom) Affected: 0 , ≤ MXLSG.240.407 (custom) Affected: 0 , ≤ MSLBD.240.407 (custom) Affected: 0 , ≤ MXLBD.240.407 (custom) Affected: 0 , ≤ CSLBN.240.407 (custom) Affected: 0 , ≤ CSLBL.240.407 (custom) Affected: 0 , ≤ CXLBN.240.407 (custom) Affected: 0 , ≤ CXLBL.240.407 (custom) Affected: 0 , ≤ CXTPP.240.407 (custom) Affected: 0 , ≤ CSTPP.240.407 (custom) Affected: 0 , ≤ CSTAT.240.407 (custom) Affected: 0 , ≤ CXTAT.240.407 (custom) Affected: 0 , ≤ CSTMH.240.407 (custom) Affected: 0 , ≤ CXTMH.240.407 (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-1127",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-02-13T19:14:28.287539Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-02-13T19:14:43.391Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"webserver"
],
"product": "CX, XC, CS, MS, MX, XM, et. al.",
"vendor": "Lexmark",
"versions": [
{
"changes": [
{
"at": "CXTLS.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTLS.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTLS.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTLS.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTLS.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTLS.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNSN.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNSN.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTSN.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTSN.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTSN.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTSN.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNGV.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNGV.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTGV.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTGV.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTGV.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTGV.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPC.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPC.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPC.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPC.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTCT.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTCT.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTPM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTPM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXNGM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXNGM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGM.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGM.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGW.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGW.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGW.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGW.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGW.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGW.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTZJ.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTZJ.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNZJ.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNZJ.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTZJ.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTZJ.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXNZJ.240.206 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXNZJ.240.205",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLSG.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLSG.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLSG.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLSG.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLBD.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLBD.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLBD.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLBD.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBN.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBN.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBL.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBL.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBN.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBN.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBL.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBL.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPP.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPP.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPP.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPP.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTAT.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTAT.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTAT.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTAT.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMH.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMH.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMH.240.408 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMH.240.407",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.\n\n\u003cp\u003e\u003c/p\u003e"
}
],
"value": "The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem."
}
],
"impacts": [
{
"capecId": "CAPEC-123",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-123 Buffer Manipulation"
}
]
},
{
"capecId": "CAPEC-124",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-124 Shared Resource Manipulation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-362",
"description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-02-13T18:49:43.500Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-1127",
"datePublished": "2025-02-13T18:49:43.500Z",
"dateReserved": "2025-02-07T21:52:05.399Z",
"dateUpdated": "2025-02-13T19:14:43.391Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-65078 (GCVE-0-2025-65078)
Vulnerability from cvelistv5 – Published: 2026-02-03 20:51 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Untrusted search path vulnerability in Embedded Solutions Framework
Summary
An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-426 - Untrusted Search Path
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.507
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65078",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-06T04:55:26.714128Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:23.262Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.507",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code."
}
],
"value": "An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-38",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-38 Leveraging/Manipulating Configuration File Search Paths"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-426",
"description": "CWE-426 Untrusted Search Path",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:51:20.556Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Untrusted search path vulnerability in Embedded Solutions Framework",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65078",
"datePublished": "2026-02-03T20:51:20.556Z",
"dateReserved": "2025-11-17T13:56:38.588Z",
"dateUpdated": "2026-02-26T15:04:23.262Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65077 (GCVE-0-2025-65077)
Vulnerability from cvelistv5 – Published: 2026-02-03 20:44 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Relative path traversal vulnerability in Embedded Solutions Framework
Summary
A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.507
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65077",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-06T04:55:27.610829Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:23.610Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.507",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-139",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-139 Relative Path Traversal"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:44:32.330Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Relative path traversal vulnerability in Embedded Solutions Framework",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65077",
"datePublished": "2026-02-03T20:44:32.330Z",
"dateReserved": "2025-11-17T13:56:38.587Z",
"dateUpdated": "2026-02-26T15:04:23.610Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65081 (GCVE-0-2025-65081)
Vulnerability from cvelistv5 – Published: 2026-02-03 20:39 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Out-of-bounds read vulnerability in Postscript interpreter
Summary
An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.506
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65081",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-04T04:56:08.400670Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:23.914Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.506",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-153",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-153 Input Data Manipulation"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:39:14.501Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Out-of-bounds read vulnerability in Postscript interpreter",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65081",
"datePublished": "2026-02-03T20:39:14.501Z",
"dateReserved": "2025-11-17T13:56:38.589Z",
"dateUpdated": "2026-02-26T15:04:23.914Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65080 (GCVE-0-2025-65080)
Vulnerability from cvelistv5 – Published: 2026-02-03 20:35 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Type confusion vulnerability in Postscript interpreter
Summary
A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.506
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65080",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-04T04:56:07.187232Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:24.195Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.506",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-153",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-153 Input Data Manipulation"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-843",
"description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:35:54.592Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Type confusion vulnerability in Postscript interpreter",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65080",
"datePublished": "2026-02-03T20:35:54.592Z",
"dateReserved": "2025-11-17T13:56:38.589Z",
"dateUpdated": "2026-02-26T15:04:24.195Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-65079 (GCVE-0-2025-65079)
Vulnerability from cvelistv5 – Published: 2026-02-03 20:23 – Updated: 2026-02-26 15:04
VLAI
EPSS
VEX
Title
Heap-based buffer overflow vulnerability in Postscript interpreter
Summary
A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ |
Affected:
0 , < 250.210
(custom)
|
|
| Lexmark | CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG |
Affected:
0 , < 230.506
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-65079",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-02-04T04:56:06.044346Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T15:04:24.490Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "250.210",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "230.506",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"value": "A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."
}
],
"exploits": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."
}
],
"impacts": [
{
"capecId": "CAPEC-100",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-100 Overflow Buffers"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-03T20:23:24.405Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Heap-based buffer overflow vulnerability in Postscript interpreter",
"workarounds": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Lexmark recommends a firmware update if your device has affected firmware.\n\n\u003cbr\u003e"
}
],
"value": "Lexmark recommends a firmware update if your device has affected firmware."
}
],
"x_generator": {
"engine": "Vulnogram 0.5.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-65079",
"datePublished": "2026-02-03T20:23:24.405Z",
"dateReserved": "2025-11-17T13:56:38.589Z",
"dateUpdated": "2026-02-26T15:04:24.490Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-9269 (GCVE-0-2025-9269)
Vulnerability from cvelistv5 – Published: 2025-09-09 17:21 – Updated: 2025-09-29 15:34
VLAI
EPSS
VEX
Title
Server-Side Request Forgery (SSRF) vulnerability found in embedded web server
Summary
A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-918 - Server-Side Request Forgery (SSRF)
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. |
Affected:
0 , ≤ CXTLS.250.199
(custom)
Affected: 0 , ≤ MXTLS.250.199 (custom) Affected: 0 , ≤ CSTLS.250.199 (custom) Affected: 0 , ≤ MSNSN.250.199 (custom) Affected: 0 , ≤ MSTSN.250.199 (custom) Affected: 0 , ≤ MXTSN.250.199 (custom) Affected: 0 , ≤ CSNGV.250.199 (custom) Affected: 0 , ≤ CSTGV.250.199 (custom) Affected: 0 , ≤ CXTGV.250.199 (custom) Affected: 0 , ≤ CXTPC.250.199 (custom) Affected: 0 , ≤ CSTPC.250.199 (custom) Affected: 0 , ≤ MXTCT.250.199 (custom) Affected: 0 , ≤ MXTPM.250.199 (custom) Affected: 0 , ≤ CXTMM.250.199 (custom) Affected: 0 , ≤ CSTMM.250.199 (custom) Affected: 0 , ≤ MSNGM.250.199 (custom) Affected: 0 , ≤ MSTGM.250.199 (custom) Affected: 0 , ≤ MXNGM.250.199 (custom) Affected: 0 , ≤ MXTGM.250.199 (custom) Affected: 0 , ≤ MSNGW.250.199 (custom) Affected: 0 , ≤ MSTGW.250.199 (custom) Affected: 0 , ≤ MXTGW.250.199 (custom) Affected: 0 , ≤ CSTZJ.250.199 (custom) Affected: 0 , ≤ CSNZJ.250.199 (custom) Affected: 0 , ≤ CXTZJ.250.199 (custom) Affected: 0 , ≤ CXNZJ.250.199 (custom) Affected: 0 , ≤ MSLSG.230.466 (custom) Affected: 0 , ≤ MXLSG.230.466 (custom) Affected: 0 , ≤ MSLBD.230.466 (custom) Affected: 0 , ≤ MXLBD.230.466 (custom) Affected: 0 , ≤ CSLBN.230.466 (custom) Affected: 0 , ≤ CSLBL.230.466 (custom) Affected: 0 , ≤ CXLBN.230.466 (custom) Affected: 0 , ≤ CXLBL.230.466 (custom) Affected: 0 , ≤ CXTPP.230.466 (custom) Affected: 0 , ≤ CSTPP.230.466 (custom) Affected: 0 , ≤ CSTAT.230.466 (custom) Affected: 0 , ≤ CXTAT.230.466 (custom) Affected: 0 , ≤ CSTMH.230.466 (custom) Affected: 0 , ≤ CXTMH.230.466 (custom) Affected: 0 , ≤ LW90.TL2.P224 (custom) Affected: 0 , ≤ LW90.PR2.P224 (custom) Affected: 0 , ≤ LW90.PR4.P224 (custom) Affected: 0 , ≤ LW90.SB4.P224 (custom) Affected: 0 , ≤ LW90.SB7.P224 (custom) Affected: 0 , ≤ LW90.DN2.P224 (custom) Affected: 0 , ≤ LW90.DN4.P224 (custom) Affected: 0 , ≤ LW90.DN7.P224 (custom) Affected: 0 , ≤ LW90.TU.P224 (custom) Affected: 0 , ≤ LW90.SA.P224 (custom) Affected: 0 , ≤ LW90.MG.P224 (custom) Affected: 0 , ≤ LW90.GM7.P224 (custom) Affected: 0 , ≤ LW90.GM4.P224 (custom) Affected: 0 , ≤ LW90.VY4.P224 (custom) Affected: 0 , ≤ LW80.PRL.P260 (custom) Affected: 0 , ≤ LW80.SB2.P260 (custom) Affected: 0 , ≤ LW80.VYL.P260 (custom) Affected: 0 , ≤ LW80.VY2.P260 (custom) Affected: 0 , ≤ LW80.GM2.P260 (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-9269",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-09-09T17:43:57.556819Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-09-09T18:36:21.085Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"webserver"
],
"product": "CX, XC, CS, MS, MX, XM, et. al.",
"vendor": "Lexmark",
"versions": [
{
"changes": [
{
"at": "CXTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPC.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPC.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPC.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPC.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTCT.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTCT.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTPM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTPM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXNGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXNGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXNZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXNZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLSG.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLSG.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLSG.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLSG.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLBD.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLBD.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLBD.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLBD.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBN.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBN.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBL.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBL.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBN.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBN.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBL.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBL.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPP.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPP.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPP.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPP.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTAT.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTAT.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTAT.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTAT.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMH.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMH.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMH.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMH.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TL2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TL2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TU.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TU.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SA.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SA.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.MG.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.MG.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.VY4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.VY4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.PRL.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.PRL.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.SB2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.SB2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VYL.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VYL.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VY2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VY2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.GM2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.GM2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server.\u0026nbsp;Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device."
}
],
"value": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server.\u00a0Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device."
}
],
"impacts": [
{
"capecId": "CAPEC-101",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-101 Server Side Include (SSI) Injection"
}
]
},
{
"capecId": "CAPEC-33",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-33: HTTP Request Smuggling"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918: Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-09-29T15:34:06.094Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Server-Side Request Forgery (SSRF) vulnerability found in embedded web server",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-9269",
"datePublished": "2025-09-09T17:21:36.589Z",
"dateReserved": "2025-08-20T15:10:24.655Z",
"dateUpdated": "2025-09-29T15:34:06.094Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2025-4046 (GCVE-0-2025-4046)
Vulnerability from cvelistv5 – Published: 2025-08-19 13:12 – Updated: 2026-02-26 17:48
VLAI
EPSS
VEX
Title
Missing Authorization in Lexmark Cloud Services badge management
Summary
A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization
Severity
8.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-862 - Missing Authorization
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | Lexmark Cloud Services |
Affected:
0
|
Date Public
2025-08-18 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-4046",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-20T03:56:05.961084Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T17:48:28.920Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Lexmark Cloud Services",
"vendor": "Lexmark",
"versions": [
{
"status": "affected",
"version": "0"
}
]
}
],
"datePublic": "2025-08-18T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003ch4\u003e\n\n\u003c/h4\u003e\u003ch4\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization\u003c/span\u003e\u003c/h4\u003e\n\n\u003cbr\u003e"
}
],
"value": "A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization"
}
],
"impacts": [
{
"capecId": "CAPEC-58",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-58: Restful Privilege Elevation"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862 Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-19T13:12:28.574Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Missing Authorization in Lexmark Cloud Services badge management",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-4046",
"datePublished": "2025-08-19T13:12:28.574Z",
"dateReserved": "2025-04-28T17:55:12.343Z",
"dateUpdated": "2026-02-26T17:48:28.920Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-4044 (GCVE-0-2025-4044)
Vulnerability from cvelistv5 – Published: 2025-08-19 13:12 – Updated: 2026-02-26 17:48
VLAI
EPSS
VEX
Title
XML External Entity Injection vulnerability in various Lexmark Universal Drivers
Summary
Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.
Severity
8.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-611 - Improper Restriction of XML External Entity Reference
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Lexmark | Universal Print Driver |
Affected:
0 , < 3.0.6.0
(custom)
|
|
| Lexmark | Printer Software G2 |
Affected:
0 , < 2.17.0.0
(custom)
|
Date Public
2025-08-18 16:00
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-4044",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-20T03:56:04.854966Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-02-26T17:48:29.270Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Universal Print Driver",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "3.0.6.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"platforms": [
"Windows"
],
"product": "Printer Software G2",
"vendor": "Lexmark",
"versions": [
{
"lessThan": "2.17.0.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"datePublic": "2025-08-18T16:00:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.\u003cbr\u003e"
}
],
"value": "Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL."
}
],
"impacts": [
{
"capecId": "CAPEC-221",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-221 Data Serialization External Entities Blowup"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-611",
"description": "CWE-611 Improper Restriction of XML External Entity Reference",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-19T13:12:09.782Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "XML External Entity Injection vulnerability in various Lexmark Universal Drivers",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-4044",
"datePublished": "2025-08-19T13:12:09.782Z",
"dateReserved": "2025-04-28T17:54:55.187Z",
"dateUpdated": "2026-02-26T17:48:29.270Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
VAR-202509-4545
Vulnerability from variot - Updated: 2025-11-20 23:01The Lexmark CX921de is a color laser printer designed for the commercial market.
A vulnerability exists in the Lexmark International Inc. Lexmark CX921de printer that could be exploited by an attacker to obtain sensitive information.
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202509-4545",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "cx921de",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-26063"
}
]
},
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2025-26063",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "CNVD",
"id": "CNVD-2025-26063",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-26063"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The Lexmark CX921de is a color laser printer designed for the commercial market.\n\nA vulnerability exists in the Lexmark International Inc. Lexmark CX921de printer that could be exploited by an attacker to obtain sensitive information.",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-26063"
}
],
"trust": 0.6
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2025-26063",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-26063"
}
]
},
"id": "VAR-202509-4545",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-26063"
}
],
"trust": 0.06
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"IoT"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-26063"
}
]
},
"last_update_date": "2025-11-20T23:01:24.517000Z",
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2025-26063"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2025-09-18T00:00:00",
"db": "CNVD",
"id": "CNVD-2025-26063"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2025-10-31T00:00:00",
"db": "CNVD",
"id": "CNVD-2025-26063"
}
]
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lexmark International Inc.\u0027s Lexmark CX921de contains an unauthorized access vulnerability.",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-26063"
}
],
"trust": 0.6
}
}
VAR-201709-1053
Vulnerability from variot - Updated: 2025-04-20 23:34Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet. Lexmark Scan To Network (SNF) Contains vulnerabilities related to certificate and password management.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. LexmarkScanToNetwork (SNF) is an embedded printer application from Lexmark. A security vulnerability exists in LexmarkSNF 3.2.9 and earlier that originated from the program storing the network configuration certificate in clear text and transmitting the certificate upon request. A remote attacker can use the vulnerability to obtain sensitive information by sending a request to cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201709-1053",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "scan to network",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "3.2.9"
},
{
"model": "scan to network",
"scope": "lte",
"trust": 0.6,
"vendor": "lexmark",
"version": "\u003c=3.2.9"
},
{
"model": "scan to network",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "3.2.9"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-31127"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007699"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-054"
},
{
"db": "NVD",
"id": "CVE-2017-13771"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:lexmark:scan_to_network",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-007699"
}
]
},
"cve": "CVE-2017-13771",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2017-13771",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.9,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2017-31127",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2017-13771",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2017-13771",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2017-13771",
"trust": 0.8,
"value": "Critical"
},
{
"author": "CNVD",
"id": "CNVD-2017-31127",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201709-054",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULMON",
"id": "CVE-2017-13771",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-31127"
},
{
"db": "VULMON",
"id": "CVE-2017-13771"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007699"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-054"
},
{
"db": "NVD",
"id": "CVE-2017-13771"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or (2) cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet. Lexmark Scan To Network (SNF) Contains vulnerabilities related to certificate and password management.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. LexmarkScanToNetwork (SNF) is an embedded printer application from Lexmark. A security vulnerability exists in LexmarkSNF 3.2.9 and earlier that originated from the program storing the network configuration certificate in clear text and transmitting the certificate upon request. A remote attacker can use the vulnerability to obtain sensitive information by sending a request to cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or cgi-bin/direct/printer/prtappauth/apps/ImportExportServlet",
"sources": [
{
"db": "NVD",
"id": "CVE-2017-13771"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007699"
},
{
"db": "CNVD",
"id": "CNVD-2017-31127"
},
{
"db": "VULMON",
"id": "CVE-2017-13771"
}
],
"trust": 2.25
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2017-13771",
"trust": 3.1
},
{
"db": "PACKETSTORM",
"id": "143975",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007699",
"trust": 0.8
},
{
"db": "EXPLOITALERT",
"id": "27457",
"trust": 0.6
},
{
"db": "CNVD",
"id": "CNVD-2017-31127",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201709-054",
"trust": 0.6
},
{
"db": "VULMON",
"id": "CVE-2017-13771",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-31127"
},
{
"db": "VULMON",
"id": "CVE-2017-13771"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007699"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-054"
},
{
"db": "NVD",
"id": "CVE-2017-13771"
}
]
},
"id": "VAR-201709-1053",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-31127"
}
],
"trust": 1.225
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-31127"
}
]
},
"last_update_date": "2025-04-20T23:34:18.122000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "Top Page",
"trust": 0.8,
"url": "http://www.lexmark.com/en_us.html"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-007699"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-522",
"trust": 1.0
},
{
"problemtype": "CWE-255",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-007699"
},
{
"db": "NVD",
"id": "CVE-2017-13771"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://seclists.org/fulldisclosure/2017/aug/46"
},
{
"trust": 1.8,
"url": "http://packetstormsecurity.com/files/143975/lexmark-scan-to-network-snf-3.2.9-information-disclosure.html"
},
{
"trust": 1.0,
"url": "https://support.lexmark.com/alerts"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-13771"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2017-13771"
},
{
"trust": 0.6,
"url": "http://www.exploitalert.com/view-details.html?id=27457"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/522.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2017-31127"
},
{
"db": "VULMON",
"id": "CVE-2017-13771"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007699"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-054"
},
{
"db": "NVD",
"id": "CVE-2017-13771"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2017-31127"
},
{
"db": "VULMON",
"id": "CVE-2017-13771"
},
{
"db": "JVNDB",
"id": "JVNDB-2017-007699"
},
{
"db": "CNNVD",
"id": "CNNVD-201709-054"
},
{
"db": "NVD",
"id": "CVE-2017-13771"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-10-23T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-31127"
},
{
"date": "2017-09-07T00:00:00",
"db": "VULMON",
"id": "CVE-2017-13771"
},
{
"date": "2017-09-29T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-007699"
},
{
"date": "2017-08-30T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201709-054"
},
{
"date": "2017-09-07T13:29:00.653000",
"db": "NVD",
"id": "CVE-2017-13771"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-10-23T00:00:00",
"db": "CNVD",
"id": "CNVD-2017-31127"
},
{
"date": "2019-10-03T00:00:00",
"db": "VULMON",
"id": "CVE-2017-13771"
},
{
"date": "2017-09-29T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2017-007699"
},
{
"date": "2019-10-23T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201709-054"
},
{
"date": "2025-04-20T01:37:25.860000",
"db": "NVD",
"id": "CVE-2017-13771"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201709-054"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lexmark Scan To Network Vulnerabilities related to certificate and password management",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2017-007699"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "trust management problem",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201709-054"
}
],
"trust": 0.6
}
}
VAR-201601-0529
Vulnerability from variot - Updated: 2025-04-13 23:32Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status. Supplementary information : CWE Vulnerability type by CWE-254: Security Features ( Security function ) Has been identified. http://cwe.mitre.org/data/definitions/254.htmlAuthentication may be circumvented by a third party using unauthorized detection of the security jumper status. Lexmarkprinter is a printer product from Lexmark. A remote attacker bypasses authentication by incorrect detection of the security-jumper state. Lexmark Laser Printers are prone to a local authentication-bypass vulnerability. A local attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may lead to further attacks. The following versions are affected: Lexmark printers using ATL versions prior to ATL.02.049, CB versions prior to CB.02.049, PP versions prior to PP.02.049, and YK versions prior to YK.02.049
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201601-0529",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "printer",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "yk.02.048"
},
{
"model": "printer",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "cb.02.048"
},
{
"model": "printer",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "pp.02.048"
},
{
"model": "printer",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "atl.02.048"
},
{
"model": "xc8155de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cs820de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "lt",
"trust": 0.8,
"vendor": "lexmark",
"version": "pp"
},
{
"model": "cx860de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx825dtfe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx825dte",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "xc8160de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cs720de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "xc8155dte",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "eq",
"trust": 0.8,
"vendor": "lexmark",
"version": "pp.02.049"
},
{
"model": "cx860dte",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "lt",
"trust": 0.8,
"vendor": "lexmark",
"version": "atl"
},
{
"model": "xc6152de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "lt",
"trust": 0.8,
"vendor": "lexmark",
"version": "yk"
},
{
"model": "cs725dte",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "xc6152dtfe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "eq",
"trust": 0.8,
"vendor": "lexmark",
"version": "atl.02.049"
},
{
"model": "xc4150",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx820dtfe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cs820dtfe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "c6160",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "c4150",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx860dtfe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "lt",
"trust": 0.8,
"vendor": "lexmark",
"version": "cb"
},
{
"model": "cs820dte",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx725de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx820de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx825de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx725dthe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "eq",
"trust": 0.8,
"vendor": "lexmark",
"version": "cb.02.049"
},
{
"model": "xc8160dte",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx725dhe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cs725de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cs720dte",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "eq",
"trust": 0.8,
"vendor": "lexmark",
"version": "yk.02.049"
},
{
"model": "laser printer atl.02.049",
"scope": "lt",
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer cb",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer pp",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer yk",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "atl.02.048"
},
{
"model": "printer",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "pp.02.048"
},
{
"model": "printer",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "cb.02.048"
},
{
"model": "printer",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "yk.02.048"
},
{
"model": "xc8160dte pp.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "xc8160de pp.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "xc8155dte pp.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "xc8155de pp.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "xc6152dtfe pp.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "xc6152de pp.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "xc4150 atl.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx860dtfe pp.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx860dte pp.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx860de pp.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx825dtfe pp.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx825dte pp.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx825de pp.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx820dtfe pp.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx820de pp.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx725dthe atl.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx725dhe atl.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx725de atl.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cs820dtfe yk.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cs820dte yk.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cs820de yk.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cs725de cb.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cs720dte cb.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cs720de cb.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c6160 yk.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c4150 cb.02.048",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "xc8160dte pp.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "xc8160de pp.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "xc8155dte pp.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "xc8155de pp.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "xc6152dtfe pp.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "xc6152de pp.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "xc4150 atl.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx860dtfe pp.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx860dte pp.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx860de pp.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx825dtfe pp.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx825dte pp.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx825de pp.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx820dtfe pp.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx820de pp.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx725dthe atl.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx725dhe atl.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cx725de atl.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cs820dtfe yk.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cs820dte yk.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cs820de yk.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cs725de cb.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cs720dte cb.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "cs720de cb.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c6160 yk.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c4150 cb.02.049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-00801"
},
{
"db": "BID",
"id": "82117"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-001341"
},
{
"db": "CNNVD",
"id": "CNNVD-201601-647"
},
{
"db": "NVD",
"id": "CVE-2016-1896"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:lexmark:c4150",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c6160",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cs720de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cs720dte",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cs725de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cs725dte",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cs820de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cs820dte",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cs820dtfe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx725de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx725dhe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx725dthe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx820de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx820dtfe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx825de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx825dte",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx825dtfe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx860de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx860dte",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx860dtfe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lexmark:printer_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:xc4150",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:xc6152de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:xc6152dtfe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:xc8155de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:xc8155dte",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:xc8160de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:xc8160dte",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2016-001341"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The vendor reported the issue.",
"sources": [
{
"db": "BID",
"id": "82117"
}
],
"trust": 0.3
},
"cve": "CVE-2016-1896",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2016-1896",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CNVD-2016-00801",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "VHN-90715",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 3.9,
"id": "CVE-2016-1896",
"impactScore": 5.9,
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2016-1896",
"trust": 1.0,
"value": "CRITICAL"
},
{
"author": "NVD",
"id": "CVE-2016-1896",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2016-00801",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201601-647",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-90715",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-00801"
},
{
"db": "VULHUB",
"id": "VHN-90715"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-001341"
},
{
"db": "CNNVD",
"id": "CNNVD-201601-647"
},
{
"db": "NVD",
"id": "CVE-2016-1896"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status. Supplementary information : CWE Vulnerability type by CWE-254: Security Features ( Security function ) Has been identified. http://cwe.mitre.org/data/definitions/254.htmlAuthentication may be circumvented by a third party using unauthorized detection of the security jumper status. Lexmarkprinter is a printer product from Lexmark. A remote attacker bypasses authentication by incorrect detection of the security-jumper state. Lexmark Laser Printers are prone to a local authentication-bypass vulnerability. \nA local attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may lead to further attacks. The following versions are affected: Lexmark printers using ATL versions prior to ATL.02.049, CB versions prior to CB.02.049, PP versions prior to PP.02.049, and YK versions prior to YK.02.049",
"sources": [
{
"db": "NVD",
"id": "CVE-2016-1896"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-001341"
},
{
"db": "CNVD",
"id": "CNVD-2016-00801"
},
{
"db": "BID",
"id": "82117"
},
{
"db": "VULHUB",
"id": "VHN-90715"
}
],
"trust": 2.52
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2016-1896",
"trust": 3.4
},
{
"db": "JVNDB",
"id": "JVNDB-2016-001341",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2016-00801",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201601-647",
"trust": 0.6
},
{
"db": "BID",
"id": "82117",
"trust": 0.4
},
{
"db": "VULHUB",
"id": "VHN-90715",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-00801"
},
{
"db": "VULHUB",
"id": "VHN-90715"
},
{
"db": "BID",
"id": "82117"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-001341"
},
{
"db": "CNNVD",
"id": "CNNVD-201601-647"
},
{
"db": "NVD",
"id": "CVE-2016-1896"
}
]
},
"id": "VAR-201601-0529",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-00801"
},
{
"db": "VULHUB",
"id": "VHN-90715"
}
],
"trust": 1.5
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-00801"
}
]
},
"last_update_date": "2025-04-13T23:32:39.748000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "TE745",
"trust": 0.8,
"url": "http://support.lexmark.com/index?page=content\u0026id=TE745"
},
{
"title": "Lexmark printer competition conditional vulnerability patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/71102"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-00801"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-001341"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-264",
"trust": 1.9
},
{
"problemtype": "CWE-254",
"trust": 1.1
},
{
"problemtype": "CWE-Other",
"trust": 0.8
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-90715"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-001341"
},
{
"db": "NVD",
"id": "CVE-2016-1896"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.6,
"url": "http://support.lexmark.com/index?page=content\u0026id=te745"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-1896"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-1896"
},
{
"trust": 0.7,
"url": "http://support.lexmark.com/index?page=content\u0026amp;id=te745"
},
{
"trust": 0.3,
"url": "http://www.lexmark.com/"
},
{
"trust": 0.3,
"url": "http://support.lexmark.com/index?page=content\u0026id=te745\u0026locale=en\u0026userlocale=en_us"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-00801"
},
{
"db": "VULHUB",
"id": "VHN-90715"
},
{
"db": "BID",
"id": "82117"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-001341"
},
{
"db": "CNNVD",
"id": "CNNVD-201601-647"
},
{
"db": "NVD",
"id": "CVE-2016-1896"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2016-00801"
},
{
"db": "VULHUB",
"id": "VHN-90715"
},
{
"db": "BID",
"id": "82117"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-001341"
},
{
"db": "CNNVD",
"id": "CNNVD-201601-647"
},
{
"db": "NVD",
"id": "CVE-2016-1896"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-02-03T00:00:00",
"db": "CNVD",
"id": "CNVD-2016-00801"
},
{
"date": "2016-01-27T00:00:00",
"db": "VULHUB",
"id": "VHN-90715"
},
{
"date": "2016-01-25T00:00:00",
"db": "BID",
"id": "82117"
},
{
"date": "2016-02-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2016-001341"
},
{
"date": "2016-01-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201601-647"
},
{
"date": "2016-01-27T05:59:04.307000",
"db": "NVD",
"id": "CVE-2016-1896"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-02-03T00:00:00",
"db": "CNVD",
"id": "CNVD-2016-00801"
},
{
"date": "2016-02-01T00:00:00",
"db": "VULHUB",
"id": "VHN-90715"
},
{
"date": "2016-01-25T00:00:00",
"db": "BID",
"id": "82117"
},
{
"date": "2016-02-02T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2016-001341"
},
{
"date": "2016-01-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201601-647"
},
{
"date": "2025-04-12T10:46:40.837000",
"db": "NVD",
"id": "CVE-2016-1896"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201601-647"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lexmark Vulnerability that bypasses authentication in printer firmware initialization process",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2016-001341"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "permissions and access control",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201601-647"
}
],
"trust": 0.6
}
}
VAR-201604-0425
Vulnerability from variot - Updated: 2025-04-13 23:14Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on non-volatile memory. Lexmarkprinter is a printer product. Lexmarkprinter has an information disclosure vulnerability that prevents local attackers from obtaining sensitive information by directly reading non-volatile memory due to failure to properly handle ErasePrinterMemory and EraseHardDisk operations. Multiple Lexmark Prrinters are prone to an unspecified local information-disclosure vulnerability. The following versions are affected: Lexmark using ATL versions prior to ATL.021.063, CB versions prior to CB.021.063, PP versions prior to PP.021.063, and YK versions prior to YK.021.063
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201604-0425",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "printer",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "cb.021.062"
},
{
"model": "printer",
"scope": "gte",
"trust": 1.0,
"vendor": "lexmark",
"version": "yk"
},
{
"model": "printer",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "yk.021.062"
},
{
"model": "printer",
"scope": "gte",
"trust": 1.0,
"vendor": "lexmark",
"version": "atl"
},
{
"model": "printer",
"scope": "gte",
"trust": 1.0,
"vendor": "lexmark",
"version": "pp"
},
{
"model": "printer",
"scope": "gte",
"trust": 1.0,
"vendor": "lexmark",
"version": "cb"
},
{
"model": "printer",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "yk.021.057"
},
{
"model": "printer",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "pp.021.062"
},
{
"model": "printer",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "atl.021.062"
},
{
"model": "xc8155de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cs820de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "lt",
"trust": 0.8,
"vendor": "lexmark",
"version": "pp"
},
{
"model": "cx860de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx825dtfe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "eq",
"trust": 0.8,
"vendor": "lexmark",
"version": "yk.021.063"
},
{
"model": "cx825dte",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "xc8160de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cs720de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "xc8155dte",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "xc6152de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx860dte",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "lt",
"trust": 0.8,
"vendor": "lexmark",
"version": "atl"
},
{
"model": "printer",
"scope": "lt",
"trust": 0.8,
"vendor": "lexmark",
"version": "yk"
},
{
"model": "cs725dte",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "eq",
"trust": 0.8,
"vendor": "lexmark",
"version": "pp.021.063"
},
{
"model": "xc6152dtfe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "xc4150",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx820dtfe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cs820dtfe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "eq",
"trust": 0.8,
"vendor": "lexmark",
"version": "cb.021.063"
},
{
"model": "c6160",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "c4150",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx860dtfe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "lt",
"trust": 0.8,
"vendor": "lexmark",
"version": "cb"
},
{
"model": "cs820dte",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx725de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx820de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx825de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx725dthe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "xc8160dte",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cx725dhe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cs725de",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "cs720dte",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "eq",
"trust": 0.8,
"vendor": "lexmark",
"version": "atl.021.063"
},
{
"model": "printer",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "printer",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "cb.021.062"
},
{
"model": "printer",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "atl.021.062"
},
{
"model": "printer",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "yk.021.057"
},
{
"model": "printer",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "pp.021.062"
},
{
"model": "printer",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "yk.021.062"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-02640"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-002700"
},
{
"db": "CNNVD",
"id": "CNNVD-201604-516"
},
{
"db": "NVD",
"id": "CVE-2016-3145"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:lexmark:c4150",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c6160",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cs720de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cs720dte",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cs725de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cs725dte",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cs820de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cs820dte",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cs820dtfe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx725de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx725dhe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx725dthe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx820de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx820dtfe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx825de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx825dte",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx825dtfe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx860de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx860dte",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:cx860dtfe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:lexmark:printer_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:xc4150",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:xc6152de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:xc6152dtfe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:xc8155de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:xc8155dte",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:xc8160de",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:xc8160dte",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2016-002700"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lexmark",
"sources": [
{
"db": "BID",
"id": "89168"
}
],
"trust": 0.3
},
"cve": "CVE-2016-3145",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 3.9,
"id": "CVE-2016-3145",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "LOW",
"trust": 1.8,
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "SINGLE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 4.6,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 3.1,
"id": "CNVD-2016-02640",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:L/AC:L/Au:S/C:C/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 3.9,
"id": "VHN-91964",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "LOW",
"trust": 0.1,
"vectorString": "AV:L/AC:L/AU:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"exploitabilityScore": 0.9,
"id": "CVE-2016-3145",
"impactScore": 3.6,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2016-3145",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2016-3145",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2016-02640",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201604-516",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-91964",
"trust": 0.1,
"value": "LOW"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-02640"
},
{
"db": "VULHUB",
"id": "VHN-91964"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-002700"
},
{
"db": "CNNVD",
"id": "CNNVD-201604-516"
},
{
"db": "NVD",
"id": "CVE-2016-3145"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on non-volatile memory. Lexmarkprinter is a printer product. Lexmarkprinter has an information disclosure vulnerability that prevents local attackers from obtaining sensitive information by directly reading non-volatile memory due to failure to properly handle ErasePrinterMemory and EraseHardDisk operations. Multiple Lexmark Prrinters are prone to an unspecified local information-disclosure vulnerability. The following versions are affected: Lexmark using ATL versions prior to ATL.021.063, CB versions prior to CB.021.063, PP versions prior to PP.021.063, and YK versions prior to YK.021.063",
"sources": [
{
"db": "NVD",
"id": "CVE-2016-3145"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-002700"
},
{
"db": "CNVD",
"id": "CNVD-2016-02640"
},
{
"db": "BID",
"id": "89168"
},
{
"db": "VULHUB",
"id": "VHN-91964"
}
],
"trust": 2.52
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2016-3145",
"trust": 3.4
},
{
"db": "JVNDB",
"id": "JVNDB-2016-002700",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201604-516",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2016-02640",
"trust": 0.6
},
{
"db": "BID",
"id": "89168",
"trust": 0.4
},
{
"db": "VULHUB",
"id": "VHN-91964",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-02640"
},
{
"db": "VULHUB",
"id": "VHN-91964"
},
{
"db": "BID",
"id": "89168"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-002700"
},
{
"db": "CNNVD",
"id": "CNNVD-201604-516"
},
{
"db": "NVD",
"id": "CVE-2016-3145"
}
]
},
"id": "VAR-201604-0425",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-02640"
},
{
"db": "VULHUB",
"id": "VHN-91964"
}
],
"trust": 1.2999999999999998
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-02640"
}
]
},
"last_update_date": "2025-04-13T23:14:21.161000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "TE760",
"trust": 0.8,
"url": "http://support.lexmark.com/index?page=content\u0026id=TE760"
},
{
"title": "Lexmark Printer Sensitive Information Disclosure Vulnerability Patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/74772"
},
{
"title": "Lexmark Fixes for printer security vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=61205"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-02640"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-002700"
},
{
"db": "CNNVD",
"id": "CNNVD-201604-516"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-200",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-91964"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-002700"
},
{
"db": "NVD",
"id": "CVE-2016-3145"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.6,
"url": "http://support.lexmark.com/index?page=content\u0026id=te760"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-3145"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-3145"
},
{
"trust": 0.6,
"url": "http://support.lexmark.com/index?page=content\u0026id=te760\u0026locale=it\u0026userlocale=it_it"
},
{
"trust": 0.3,
"url": "http://www.lexmark.com/"
},
{
"trust": 0.1,
"url": "http://support.lexmark.com/index?page=content\u0026amp;id=te760"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-02640"
},
{
"db": "VULHUB",
"id": "VHN-91964"
},
{
"db": "BID",
"id": "89168"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-002700"
},
{
"db": "CNNVD",
"id": "CNNVD-201604-516"
},
{
"db": "NVD",
"id": "CVE-2016-3145"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2016-02640"
},
{
"db": "VULHUB",
"id": "VHN-91964"
},
{
"db": "BID",
"id": "89168"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-002700"
},
{
"db": "CNNVD",
"id": "CNNVD-201604-516"
},
{
"db": "NVD",
"id": "CVE-2016-3145"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-04-27T00:00:00",
"db": "CNVD",
"id": "CNVD-2016-02640"
},
{
"date": "2016-04-22T00:00:00",
"db": "VULHUB",
"id": "VHN-91964"
},
{
"date": "2016-04-07T00:00:00",
"db": "BID",
"id": "89168"
},
{
"date": "2016-05-17T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2016-002700"
},
{
"date": "2016-04-22T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201604-516"
},
{
"date": "2016-04-22T00:59:09.493000",
"db": "NVD",
"id": "CVE-2016-3145"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-04-27T00:00:00",
"db": "CNVD",
"id": "CNVD-2016-02640"
},
{
"date": "2019-08-28T00:00:00",
"db": "VULHUB",
"id": "VHN-91964"
},
{
"date": "2016-04-07T00:00:00",
"db": "BID",
"id": "89168"
},
{
"date": "2016-05-17T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2016-002700"
},
{
"date": "2019-08-29T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201604-516"
},
{
"date": "2025-04-12T10:46:40.837000",
"db": "NVD",
"id": "CVE-2016-3145"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "local",
"sources": [
{
"db": "BID",
"id": "89168"
},
{
"db": "CNNVD",
"id": "CNNVD-201604-516"
}
],
"trust": 0.9
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lexmark Vulnerability in obtaining important information in printer firmware",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2016-002700"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "information disclosure",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201604-516"
}
],
"trust": 0.6
}
}
VAR-201502-0017
Vulnerability from variot - Updated: 2025-04-12 23:27Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remote authenticated users to write to and execute arbitrary files via a .. (dot dot) in a file path in a ZIP archive. Authentication is not required to exploit this vulnerability. The specific flaw exists within the LibraryFileUploadServlet servlet. An attacker could leverage this to execute arbitrary code as SYSTEM. Lexmark Markvision Enterprise is a web-based network device management software from Lexmark. This software is mainly used to manage network devices such as printers, such as providing some printer drivers for Unix systems. Failed attacks may cause a denial-of-service condition
Show details on source website{
"affected_products": {
"_id": null,
"data": [
{
"_id": null,
"model": "markvision enterprise",
"scope": null,
"trust": 2.1,
"vendor": "lexmark",
"version": null
},
{
"_id": null,
"model": "markvision enterprise",
"scope": "eq",
"trust": 1.9,
"vendor": "lexmark",
"version": null
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-15-046"
},
{
"db": "CNVD",
"id": "CNVD-2015-01280"
},
{
"db": "BID",
"id": "72726"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-007899"
},
{
"db": "CNNVD",
"id": "CNNVD-201502-341"
},
{
"db": "NVD",
"id": "CVE-2014-9375"
}
]
},
"configurations": {
"_id": null,
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:lexmark:markvision_enterprise",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-007899"
}
]
},
"credits": {
"_id": null,
"data": "Andrea Micalizzi (rgod)",
"sources": [
{
"db": "ZDI",
"id": "ZDI-15-046"
},
{
"db": "BID",
"id": "72726"
}
],
"trust": 1.0
},
"cve": "CVE-2014-9375",
"cvss": {
"_id": null,
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 9.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.0,
"id": "CVE-2014-9375",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 2.5,
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 9.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.0,
"id": "CNVD-2015-01280",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2014-9375",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2014-9375",
"trust": 0.8,
"value": "High"
},
{
"author": "ZDI",
"id": "CVE-2014-9375",
"trust": 0.7,
"value": "HIGH"
},
{
"author": "CNVD",
"id": "CNVD-2015-01280",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201502-341",
"trust": 0.6,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-15-046"
},
{
"db": "CNVD",
"id": "CNVD-2015-01280"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-007899"
},
{
"db": "CNNVD",
"id": "CNNVD-201502-341"
},
{
"db": "NVD",
"id": "CVE-2014-9375"
}
]
},
"description": {
"_id": null,
"data": "Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remote authenticated users to write to and execute arbitrary files via a .. (dot dot) in a file path in a ZIP archive. Authentication is not required to exploit this vulnerability. The specific flaw exists within the LibraryFileUploadServlet servlet. An attacker could leverage this to execute arbitrary code as SYSTEM. Lexmark Markvision Enterprise is a web-based network device management software from Lexmark. This software is mainly used to manage network devices such as printers, such as providing some printer drivers for Unix systems. Failed attacks may cause a denial-of-service condition",
"sources": [
{
"db": "NVD",
"id": "CVE-2014-9375"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-007899"
},
{
"db": "ZDI",
"id": "ZDI-15-046"
},
{
"db": "CNVD",
"id": "CNVD-2015-01280"
},
{
"db": "BID",
"id": "72726"
}
],
"trust": 3.06
},
"external_ids": {
"_id": null,
"data": [
{
"db": "NVD",
"id": "CVE-2014-9375",
"trust": 4.0
},
{
"db": "ZDI",
"id": "ZDI-15-046",
"trust": 3.2
},
{
"db": "JVNDB",
"id": "JVNDB-2014-007899",
"trust": 0.8
},
{
"db": "ZDI_CAN",
"id": "ZDI-CAN-2648",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2015-01280",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201502-341",
"trust": 0.6
},
{
"db": "BID",
"id": "72726",
"trust": 0.3
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-15-046"
},
{
"db": "CNVD",
"id": "CNVD-2015-01280"
},
{
"db": "BID",
"id": "72726"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-007899"
},
{
"db": "CNNVD",
"id": "CNNVD-201502-341"
},
{
"db": "NVD",
"id": "CVE-2014-9375"
}
]
},
"id": "VAR-201502-0017",
"iot": {
"_id": null,
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-01280"
}
],
"trust": 0.06
},
"iot_taxonomy": {
"_id": null,
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2015-01280"
}
]
},
"last_update_date": "2025-04-12T23:27:39.835000Z",
"patch": {
"_id": null,
"data": [
{
"title": "TE677",
"trust": 0.8,
"url": "http://support.lexmark.com/index?page=content\u0026id=TE677"
},
{
"title": "Lexmark has issued an update to correct this vulnerability.",
"trust": 0.7,
"url": "http://support.lexmark.com/index?page=content\u0026id=TE677\u0026locale=EN\u0026userlocale=EN_US"
},
{
"title": "Lexmark Markvision Enterprise LibraryFileUploadServlet servlet directory traversal vulnerability patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/55555"
},
{
"title": "MVE-2.1.1",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=54214"
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-15-046"
},
{
"db": "CNVD",
"id": "CNVD-2015-01280"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-007899"
},
{
"db": "CNNVD",
"id": "CNNVD-201502-341"
}
]
},
"problemtype_data": {
"_id": null,
"data": [
{
"problemtype": "CWE-22",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-007899"
},
{
"db": "NVD",
"id": "CVE-2014-9375"
}
]
},
"references": {
"_id": null,
"data": [
{
"trust": 2.5,
"url": "http://www.zerodayinitiative.com/advisories/zdi-15-046/"
},
{
"trust": 1.6,
"url": "http://support.lexmark.com/index?page=content\u0026id=te677"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-9375"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-9375"
},
{
"trust": 0.7,
"url": "http://support.lexmark.com/index?page=content\u0026id=te677\u0026locale=en\u0026userlocale=en_us"
},
{
"trust": 0.3,
"url": "http://www1.lexmark.com/en_us/software/markvision/index.shtml"
},
{
"trust": 0.3,
"url": "http://support.lexmark.com/index?page=content\u0026id=te677\u0026locale=en\u0026userlocale=en_us "
}
],
"sources": [
{
"db": "ZDI",
"id": "ZDI-15-046"
},
{
"db": "CNVD",
"id": "CNVD-2015-01280"
},
{
"db": "BID",
"id": "72726"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-007899"
},
{
"db": "CNNVD",
"id": "CNNVD-201502-341"
},
{
"db": "NVD",
"id": "CVE-2014-9375"
}
]
},
"sources": {
"_id": null,
"data": [
{
"db": "ZDI",
"id": "ZDI-15-046",
"ident": null
},
{
"db": "CNVD",
"id": "CNVD-2015-01280",
"ident": null
},
{
"db": "BID",
"id": "72726",
"ident": null
},
{
"db": "JVNDB",
"id": "JVNDB-2014-007899",
"ident": null
},
{
"db": "CNNVD",
"id": "CNNVD-201502-341",
"ident": null
},
{
"db": "NVD",
"id": "CVE-2014-9375",
"ident": null
}
]
},
"sources_release_date": {
"_id": null,
"data": [
{
"date": "2015-02-13T00:00:00",
"db": "ZDI",
"id": "ZDI-15-046",
"ident": null
},
{
"date": "2015-02-27T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-01280",
"ident": null
},
{
"date": "2015-02-13T00:00:00",
"db": "BID",
"id": "72726",
"ident": null
},
{
"date": "2015-02-19T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-007899",
"ident": null
},
{
"date": "2015-02-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201502-341",
"ident": null
},
{
"date": "2015-02-16T15:59:00.057000",
"db": "NVD",
"id": "CVE-2014-9375",
"ident": null
}
]
},
"sources_update_date": {
"_id": null,
"data": [
{
"date": "2015-02-13T00:00:00",
"db": "ZDI",
"id": "ZDI-15-046",
"ident": null
},
{
"date": "2015-02-27T00:00:00",
"db": "CNVD",
"id": "CNVD-2015-01280",
"ident": null
},
{
"date": "2015-02-13T00:00:00",
"db": "BID",
"id": "72726",
"ident": null
},
{
"date": "2015-02-19T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-007899",
"ident": null
},
{
"date": "2015-02-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201502-341",
"ident": null
},
{
"date": "2025-04-12T10:46:40.837000",
"db": "NVD",
"id": "CVE-2014-9375",
"ident": null
}
]
},
"threat_type": {
"_id": null,
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201502-341"
}
],
"trust": 0.6
},
"title": {
"_id": null,
"data": "Lexmark Markvision Enterprise of LibraryFileUploadServlet Directory traversal vulnerability in servlets",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-007899"
}
],
"trust": 0.8
},
"type": {
"_id": null,
"data": "path traversal",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201502-341"
}
],
"trust": 0.6
}
}
VAR-201003-0256
Vulnerability from variot - Updated: 2025-04-11 23:17The flood-protection feature in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser and inkjet printers and MarkNet devices allows remote attackers to cause a denial of service (TCP outage) by making many passive FTP connections and then aborting these connections. (TCP Stop function ) There is a possibility of being put into a state. Lexmark laser printers are popular printer devices. Some of the Lemark printers and MarkNet devices contain a security vulnerability in the FTP service. A remote attacker can submit a special request that causes the printer FTP to stop responding. Duplicate requests can cause the printer to ignore inbound TCP network connections to other services. Lexmark products implement a \"flood flood\" attack protection mechanism by limiting the number of simultaneous network connections. This protection mechanism is implemented on most TCP service ports (21/FTP 79/Finger, 515/LPD, 631/IPP, 5001, 9100-9104). , 9200, 9300, 9400, 9500-9501 & 9600). However, when the passive FTP connection is dropped, the FTP service exception handler does not properly maintain the \"flood flood\" protection status. Once enough passive FTP connections are timed out (usually 15), the \"flood flood\" attack protection will be enabled. Was reset. Exploiting this issue allows remote attackers to cause the device to enable flood protection indefinitely, effectively denying service to legitimate users.
Please see the vendor advisory for a list of affected products and versions.
SOLUTION: Please see the vendor advisory for details on how to obtain an updated firmware or to apply a workaround.
PROVIDED AND/OR DISCOVERED BY: Francis Provencher, Protek Research Lab's
ORIGINAL ADVISORY: Lexmark: http://support.lexmark.com/index?page=content&id=TE85&locale=EN&userlocale=EN_US
Protek Research Lab's: http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=11&Itemid=11
About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201003-0256",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "z2420",
"scope": null,
"trust": 1.4,
"vendor": "lexmark",
"version": null
},
{
"model": "z2420",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "z15xx net.mh.n206",
"scope": null,
"trust": 0.9,
"vendor": "lexmark",
"version": null
},
{
"model": "z2420 net.ar.n204",
"scope": null,
"trust": 0.9,
"vendor": "lexmark",
"version": null
},
{
"model": "z1420 net.mh.n206",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "net.ch.n208",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x9575"
},
{
"model": "lc.br.p049",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x94x"
},
{
"model": "lc.da.p076",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x9350"
},
{
"model": "lp.sp.p112",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x86x"
},
{
"model": "lc4.be.p457",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x85x"
},
{
"model": "x782e lc2.to.p305c",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x772e lc.tr.p275",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "net.ch.n208",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x7675"
},
{
"model": "net.mh.n206",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x7550"
},
{
"model": "lr.fl.p224b",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x73x"
},
{
"model": "net.ar.n204",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x6650"
},
{
"model": "lr.mn.p224a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x65x"
},
{
"model": "net.mh.n206",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x6570"
},
{
"model": "x64xef lc2.ti.p305a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "lc2.mc.p307a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x646"
},
{
"model": "lc2.mc.p307a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x644"
},
{
"model": "lc2.mb.p307b",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x642"
},
{
"model": "ll.el.p424",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x544"
},
{
"model": "ll.el.p424",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x543"
},
{
"model": "x4975ve net.ch.n208",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "net.ar.n204",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x4975"
},
{
"model": "net.mh.n206",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x4875"
},
{
"model": "lr.bs.p224a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x46x"
},
{
"model": "net.ar.n204",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x4650"
},
{
"model": "net.mh.n206",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x4550"
},
{
"model": "gn.aq.p202",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x422"
},
{
"model": "ll.bz.p424",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x36x"
},
{
"model": "401.ec4",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x34x"
},
{
"model": "ll.bz.p424",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x26x"
},
{
"model": "lm1.mt.p110h",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x20x"
},
{
"model": "w850 lp.jb.p108ws",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ls.ha.p121",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t656 lsj.sj.p019",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t654 lr.jp.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t652 lr.jp.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t650 lr.jp.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t64x ls.st.p240",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t430 jx.ju.p101",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n8130 nr.aps.n368",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n8120 nr.aps.n368",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n70xxe lc.co.n054",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n4050e go.go.n106",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n4000 ph2.me.n134",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e462 lr.lbh.p224cws",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e460 lr.lbh.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e450 lm.sz.p113vcref",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360dn ll.lbm.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360d ll.lbl.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e350 le.ph.p121",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e34x br.h.p204",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e33x 141.c09",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e260 ll.lbl.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e250 le.pm.p121",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e240n br.q.p204",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e240 br.m.p204",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e23x 141.c09",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e238 br.m.p204",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e120 le.ul.p040",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c935dn lc.jo.p051",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c920 ls.ta.p127",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c78x lc.io.p165a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c77x lc.cm.p027b",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c73x lr.sk.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c546 lu.as.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c544 ll.as.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c543 ll.as.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c540 ll.as.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c53x ls.sw.p026avc",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c52x ls.fa.p129",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c510",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "891.004"
},
{
"model": "25xxn lcl.cu.p105",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "z2420 net.ar.n205",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "z15xx net.mh.n207",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "z1420 net.mh.n207",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "net.ch.n209",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x9575"
},
{
"model": "lc.br.p051hds1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x94x"
},
{
"model": "lc.br.p051hds",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x94x"
},
{
"model": "lc.da.p077",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x9350"
},
{
"model": "lp.lp.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x86x"
},
{
"model": "lp.lp.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x86x"
},
{
"model": "lc4.be.p457s1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x85x"
},
{
"model": "lc4.be.p457s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x85x"
},
{
"model": "x782e lc2.to.p305cs1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x782e lc2.to.p305cs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x772e lc2.tr.p275s1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x772e lc2.tr.p275s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "net.ch.n209",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x7675"
},
{
"model": "net.mh.n207",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x7550"
},
{
"model": "lr.fl.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x73x"
},
{
"model": "lr.fl.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x73x"
},
{
"model": "net.ar.n205",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x6650"
},
{
"model": "lr.mn.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x65x"
},
{
"model": "lr.mn.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x65x"
},
{
"model": "net.mh.n207",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x6570"
},
{
"model": "x64xef lc2.ti.p305as1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x64xef lc2.ti.p305as",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "lc2.mc.p307as1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x646"
},
{
"model": "lc2.mc.p307as",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x646"
},
{
"model": "lc2.mc.p307as1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x644"
},
{
"model": "lc2.mc.p307as",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x644"
},
{
"model": "lc2.mb.p307bs1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x642"
},
{
"model": "lc2.mb.p307bs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x642"
},
{
"model": "ll.el.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x544"
},
{
"model": "ll.el.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x543"
},
{
"model": "x4975ve net.ch.n209",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "net.ar.n205",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x4975"
},
{
"model": "net.mh.n207",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x4875"
},
{
"model": "lr.bs.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x46x"
},
{
"model": "lr.bs.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x46x"
},
{
"model": "net.ar.n205",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x4650"
},
{
"model": "net.mh.n207",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x4550"
},
{
"model": "ll.bz.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x36x"
},
{
"model": "ll.bz.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x26x"
},
{
"model": "lm1.mt.p214",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x20x"
},
{
"model": "w850 lp.jb.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w850 lp.jb.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ls.ha.p225s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ls.ha.p121s1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ls.ha.p121s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t656 lsj.sj.p019s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t654 lr.jp.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t654 lr.jp.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t652 lr.jp.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t652 lr.jp.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t650 lr.jp.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t650 lr.jp.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t64x ls.st.p240s1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t64x ls.st.p240s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n8130 nr.aps.447c",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n8120 nr.aps.447c",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n70xxe lc.co.n069",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n4050e go.go.n206",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n4000 lc.md.p012d",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e462 lr.lbh.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e462 lr.lbh.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e460 lr.lbh.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e460 lr.lbh.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e450 lm.sz.p113vcres1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e450 lm.sz.p113vcres",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360dn ll.lbm.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360d ll.lbl.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e260 ll.lbl.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c935dn lc.jo.p051s1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c935dn lc.jo.p051s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c920 ls.ta.p127s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c920 ls.ta.p127eps",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c78x lc.io.p165as1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c78x lc.io.p165as",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c77x lc.cm.p027bs1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c77x lc.cm.p027bs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c73x lr.sk.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c73x lr.sk.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c546 lu.as.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c544 ll.as.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c543 ll.as.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c540 ll.as.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c53x ls.sw.p027lpcs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c53x ls.sw.p026avcs1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c53x ls.sw.p026avcs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c52x ls.fa.p129s1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c52x ls.fa.p129s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c52x ls.fa.p129lpcs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "25xxn lc.cu.p106",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0415"
},
{
"db": "BID",
"id": "38906"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004500"
},
{
"db": "CNNVD",
"id": "CNNVD-201003-332"
},
{
"db": "NVD",
"id": "CVE-2010-0618"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:lexmark:z2420",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-004500"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Francis Provencher",
"sources": [
{
"db": "PACKETSTORM",
"id": "87592"
},
{
"db": "CNNVD",
"id": "CNNVD-201003-332"
}
],
"trust": 0.7
},
"cve": "CVE-2010-0618",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2010-0618",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2010-0618",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2010-0618",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-201003-332",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-004500"
},
{
"db": "CNNVD",
"id": "CNNVD-201003-332"
},
{
"db": "NVD",
"id": "CVE-2010-0618"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The flood-protection feature in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser and inkjet printers and MarkNet devices allows remote attackers to cause a denial of service (TCP outage) by making many passive FTP connections and then aborting these connections. (TCP Stop function ) There is a possibility of being put into a state. Lexmark laser printers are popular printer devices. Some of the Lemark printers and MarkNet devices contain a security vulnerability in the FTP service. A remote attacker can submit a special request that causes the printer FTP to stop responding. Duplicate requests can cause the printer to ignore inbound TCP network connections to other services. Lexmark products implement a \\\"flood flood\\\" attack protection mechanism by limiting the number of simultaneous network connections. This protection mechanism is implemented on most TCP service ports (21/FTP 79/Finger, 515/LPD, 631/IPP, 5001, 9100-9104). , 9200, 9300, 9400, 9500-9501 \u0026 9600). However, when the passive FTP connection is dropped, the FTP service exception handler does not properly maintain the \\\"flood flood\\\" protection status. Once enough passive FTP connections are timed out (usually 15), the \\\"flood flood\\\" attack protection will be enabled. Was reset. \nExploiting this issue allows remote attackers to cause the device to enable flood protection indefinitely, effectively denying service to legitimate users. \n\nPlease see the vendor advisory for a list of affected products and\nversions. \n\nSOLUTION:\nPlease see the vendor advisory for details on how to obtain an\nupdated firmware or to apply a workaround. \n\nPROVIDED AND/OR DISCOVERED BY:\nFrancis Provencher, Protek Research Lab\u0027s\n\nORIGINAL ADVISORY:\nLexmark:\nhttp://support.lexmark.com/index?page=content\u0026id=TE85\u0026locale=EN\u0026userlocale=EN_US\n\nProtek Research Lab\u0027s:\nhttp://www.protekresearchlab.com/index.php?option=com_content\u0026view=article\u0026id=11\u0026Itemid=11\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2010-0618"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004500"
},
{
"db": "CNVD",
"id": "CNVD-2010-0415"
},
{
"db": "BID",
"id": "38906"
},
{
"db": "PACKETSTORM",
"id": "87613"
}
],
"trust": 2.52
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2010-0618",
"trust": 3.4
},
{
"db": "BID",
"id": "38906",
"trust": 1.9
},
{
"db": "SECUNIA",
"id": "39056",
"trust": 1.1
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004500",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2010-0415",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20100322 {PRL} LEXMARK MULTIPLE LASER PRINTER FTP REMOTE DENIAL OF SERVICES",
"trust": 0.6
},
{
"db": "NSFOCUS",
"id": "14689",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201003-332",
"trust": 0.6
},
{
"db": "PACKETSTORM",
"id": "87613",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "87592",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0415"
},
{
"db": "BID",
"id": "38906"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004500"
},
{
"db": "PACKETSTORM",
"id": "87613"
},
{
"db": "PACKETSTORM",
"id": "87592"
},
{
"db": "CNNVD",
"id": "CNNVD-201003-332"
},
{
"db": "NVD",
"id": "CVE-2010-0618"
}
]
},
"id": "VAR-201003-0256",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0415"
}
],
"trust": 1.2875
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0415"
}
]
},
"last_update_date": "2025-04-11T23:17:58.696000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "TE85",
"trust": 0.8,
"url": "http://support.lexmark.com/index?page=content\u0026id=TE85\u0026locale=EN\u0026userlocale=EN_US"
},
{
"title": "Lexmark Laser Printer FTP Service Remote Denial of Service Vulnerability Patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/2227"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0415"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004500"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
},
{
"problemtype": "CWE-Other",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-004500"
},
{
"db": "NVD",
"id": "CVE-2010-0618"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.6,
"url": "http://support.lexmark.com/index?page=content\u0026id=te85\u0026locale=en\u0026userlocale=en_us"
},
{
"trust": 1.6,
"url": "http://www.securityfocus.com/bid/38906"
},
{
"trust": 1.1,
"url": "http://www.protekresearchlab.com/index.php?option=com_content\u0026view=article\u0026id=11\u0026itemid=11"
},
{
"trust": 1.0,
"url": "http://secunia.com/advisories/39056"
},
{
"trust": 1.0,
"url": "http://www.securityfocus.com/archive/1/510285/100/0/threaded"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0618"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-0618"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/510285/100/0/threaded"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/14689"
},
{
"trust": 0.3,
"url": "http://www.lexmark.com/"
},
{
"trust": 0.3,
"url": "/archive/1/510285"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/39056/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0618"
},
{
"trust": 0.1,
"url": "http://www.protekresearchlab.com"
},
{
"trust": 0.1,
"url": "http://support.lexmark.com/alerts"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0415"
},
{
"db": "BID",
"id": "38906"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004500"
},
{
"db": "PACKETSTORM",
"id": "87613"
},
{
"db": "PACKETSTORM",
"id": "87592"
},
{
"db": "CNNVD",
"id": "CNNVD-201003-332"
},
{
"db": "NVD",
"id": "CVE-2010-0618"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2010-0415"
},
{
"db": "BID",
"id": "38906"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004500"
},
{
"db": "PACKETSTORM",
"id": "87613"
},
{
"db": "PACKETSTORM",
"id": "87592"
},
{
"db": "CNNVD",
"id": "CNNVD-201003-332"
},
{
"db": "NVD",
"id": "CVE-2010-0618"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2010-03-23T00:00:00",
"db": "CNVD",
"id": "CNVD-2010-0415"
},
{
"date": "2010-03-23T00:00:00",
"db": "BID",
"id": "38906"
},
{
"date": "2012-09-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2010-004500"
},
{
"date": "2010-03-24T11:24:50",
"db": "PACKETSTORM",
"id": "87613"
},
{
"date": "2010-03-24T15:58:08",
"db": "PACKETSTORM",
"id": "87592"
},
{
"date": "2010-03-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201003-332"
},
{
"date": "2010-03-24T22:45:15.937000",
"db": "NVD",
"id": "CVE-2010-0618"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2010-03-23T00:00:00",
"db": "CNVD",
"id": "CNVD-2010-0415"
},
{
"date": "2015-03-19T09:42:00",
"db": "BID",
"id": "38906"
},
{
"date": "2012-09-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2010-004500"
},
{
"date": "2010-03-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201003-332"
},
{
"date": "2025-04-11T00:51:21.963000",
"db": "NVD",
"id": "CVE-2010-0618"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201003-332"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "specific Lexmark Service disruption in flood protection function of laser printer (DoS) Vulnerabilities",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-004500"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201003-332"
}
],
"trust": 0.6
}
}
VAR-201402-0119
Vulnerability from variot - Updated: 2025-04-11 23:11cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P152, C78x through LC.IO.P187, X78x through LC2.IO.P335, C77x through LC.CM.P052, X772 through LC2.TR.P291, C53x through LS.SW.P069, C52x through LS.FA.P150, 25xxN through LCL.CU.P114, N4000 through LC.MD.P119, N4050e through GO.GO.N206, N70xxe through LC.CO.N309, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allows remote attackers to remove the Password Protect administrative password via the vac.255.GENPASSWORD parameter. Certain Lexmark devices are vulnerable to unverified password changes and stored cross-site scripting attacks. Lexmark Laser Printers is a laser printer device. Lexmark Laser Printers manages the WEB interface for verification bypass vulnerabilities. An empty string. Attackers can exploit this issue to gain authenticated access to the affected device and access sensitive information, which may aid in further attacks
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201402-0119",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "25xxn",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lcl.cu.p114"
},
{
"model": "c52x",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "ls.fa.p150"
},
{
"model": "c53x",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "ls.sw.p069"
},
{
"model": "c77x",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lc.cm.p052"
},
{
"model": "c78x",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lc.io.p187"
},
{
"model": "c920",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "ls.ta.p152"
},
{
"model": "c935dn",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lc.jo.p091"
},
{
"model": "e250",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "le.pm.p126"
},
{
"model": "e350",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "le.ph.p129"
},
{
"model": "e450",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lm.sz.p124"
},
{
"model": "n4000",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lc.md.p119"
},
{
"model": "n4050e",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "go.go.n206"
},
{
"model": "n70xxe",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lc.co.n309"
},
{
"model": "t64x",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "ls.st.p343"
},
{
"model": "w840",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "ls.ha.p252"
},
{
"model": "x642",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lc2.mb.p318"
},
{
"model": "x646",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lc2.mc.p373"
},
{
"model": "x64xef",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lc2.ti.p325"
},
{
"model": "x772",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lc2.tr.p291"
},
{
"model": "x78x",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lc2.io.p335"
},
{
"model": "x85x",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lc4.be.p487"
},
{
"model": "x94x",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lc.br.p141"
},
{
"model": "x644",
"scope": "lte",
"trust": 1.0,
"vendor": "lexmark",
"version": "lc4.be.p487"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x644",
"scope": "lte",
"trust": 0.8,
"vendor": "lexmark",
"version": "lc2.mc.p373"
},
{
"model": "laser printer w840",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer c920",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer t64x",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer c53x",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer c935dn",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer c52x",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer e450",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer e350",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer e250",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "n4050e",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "go.go.n206"
},
{
"model": "x772",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "lc2.tr.p291"
},
{
"model": "e250",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "le.pm.p126"
},
{
"model": "n70xxe",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "lc.co.n309"
},
{
"model": "n4000",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "lc.md.p119"
},
{
"model": "e350",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "le.ph.p129"
},
{
"model": "e450",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "lm.sz.p124"
},
{
"model": "c77x",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "lc.cm.p052"
},
{
"model": "c52x",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "ls.fa.p150"
},
{
"model": "c53x",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "ls.sw.p069"
},
{
"model": "n4050e go.go.n206",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#108062"
},
{
"db": "CNVD",
"id": "CNVD-2014-00770"
},
{
"db": "BID",
"id": "65274"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005982"
},
{
"db": "CNNVD",
"id": "CNNVD-201402-018"
},
{
"db": "NVD",
"id": "CVE-2013-6032"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:lexmark:25xxn",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c52x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c53x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c77x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c78x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c920",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c935dn",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e250",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e350",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e450",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:n4000",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:n4050e",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:n70xxe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:t64x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:w840",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x642",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x644",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x646",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x64xef",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x772",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x78x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x85x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x94x",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-005982"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Jeff Popio",
"sources": [
{
"db": "BID",
"id": "65274"
}
],
"trust": 0.3
},
"cve": "CVE-2013-6032",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2013-6032",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 6.8,
"id": "CNVD-2014-00770",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-6032",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2013-6032",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2014-00770",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201402-018",
"trust": 0.6,
"value": "CRITICAL"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-00770"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005982"
},
{
"db": "CNNVD",
"id": "CNNVD-201402-018"
},
{
"db": "NVD",
"id": "CVE-2013-6032"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P152, C78x through LC.IO.P187, X78x through LC2.IO.P335, C77x through LC.CM.P052, X772 through LC2.TR.P291, C53x through LS.SW.P069, C52x through LS.FA.P150, 25xxN through LCL.CU.P114, N4000 through LC.MD.P119, N4050e through GO.GO.N206, N70xxe through LC.CO.N309, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allows remote attackers to remove the Password Protect administrative password via the vac.255.GENPASSWORD parameter. Certain Lexmark devices are vulnerable to unverified password changes and stored cross-site scripting attacks. Lexmark Laser Printers is a laser printer device. Lexmark Laser Printers manages the WEB interface for verification bypass vulnerabilities. An empty string. \nAttackers can exploit this issue to gain authenticated access to the affected device and access sensitive information, which may aid in further attacks",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-6032"
},
{
"db": "CERT/CC",
"id": "VU#108062"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005982"
},
{
"db": "CNVD",
"id": "CNVD-2014-00770"
},
{
"db": "BID",
"id": "65274"
}
],
"trust": 3.15
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#108062",
"trust": 3.8
},
{
"db": "NVD",
"id": "CVE-2013-6032",
"trust": 3.3
},
{
"db": "BID",
"id": "65274",
"trust": 0.9
},
{
"db": "JVN",
"id": "JVNVU92568059",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005982",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2014-00770",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201402-018",
"trust": 0.6
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#108062"
},
{
"db": "CNVD",
"id": "CNVD-2014-00770"
},
{
"db": "BID",
"id": "65274"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005982"
},
{
"db": "CNNVD",
"id": "CNNVD-201402-018"
},
{
"db": "NVD",
"id": "CVE-2013-6032"
}
]
},
"id": "VAR-201402-0119",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-00770"
}
],
"trust": 1.55625
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-00770"
}
]
},
"last_update_date": "2025-04-11T23:11:57.655000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "TE586 (Password Reset Vulnerability)",
"trust": 0.8,
"url": "http://support.lexmark.com/index?page=content\u0026id=TE586\u0026locale=EN\u0026userlocale=EN_US"
},
{
"title": "Lexmark Laser Printers verifies patches that bypass the vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/43414"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-00770"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005982"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-20",
"trust": 1.8
},
{
"problemtype": "CWE-Other",
"trust": 0.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-005982"
},
{
"db": "NVD",
"id": "CVE-2013-6032"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.0,
"url": "http://www.kb.cert.org/vuls/id/108062"
},
{
"trust": 1.6,
"url": "http://support.lexmark.com/index?page=content\u0026id=te586"
},
{
"trust": 0.8,
"url": "about vulnerability notes"
},
{
"trust": 0.8,
"url": "contact us about this vulnerability"
},
{
"trust": 0.8,
"url": "provide a vendor statement"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-6032"
},
{
"trust": 0.8,
"url": "http://jvn.jp/vu/jvnvu92568059/index.html"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-6032"
},
{
"trust": 0.3,
"url": "http://www.lexmark.com/"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#108062"
},
{
"db": "CNVD",
"id": "CNVD-2014-00770"
},
{
"db": "BID",
"id": "65274"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005982"
},
{
"db": "CNNVD",
"id": "CNNVD-201402-018"
},
{
"db": "NVD",
"id": "CVE-2013-6032"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#108062"
},
{
"db": "CNVD",
"id": "CNVD-2014-00770"
},
{
"db": "BID",
"id": "65274"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005982"
},
{
"db": "CNNVD",
"id": "CNNVD-201402-018"
},
{
"db": "NVD",
"id": "CVE-2013-6032"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-01-31T00:00:00",
"db": "CERT/CC",
"id": "VU#108062"
},
{
"date": "2014-02-13T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-00770"
},
{
"date": "2014-01-31T00:00:00",
"db": "BID",
"id": "65274"
},
{
"date": "2014-02-05T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-005982"
},
{
"date": "2014-02-08T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201402-018"
},
{
"date": "2014-02-04T05:39:08.137000",
"db": "NVD",
"id": "CVE-2013-6032"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-01-31T00:00:00",
"db": "CERT/CC",
"id": "VU#108062"
},
{
"date": "2014-02-13T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-00770"
},
{
"date": "2014-01-31T00:00:00",
"db": "BID",
"id": "65274"
},
{
"date": "2014-02-05T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-005982"
},
{
"date": "2014-02-08T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201402-018"
},
{
"date": "2025-04-11T00:51:21.963000",
"db": "NVD",
"id": "CVE-2013-6032"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201402-018"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lexmark laser printers contain multiple vulnerabilities",
"sources": [
{
"db": "CERT/CC",
"id": "VU#108062"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "input validation",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201402-018"
}
],
"trust": 0.6
}
}
VAR-201402-0120
Vulnerability from variot - Updated: 2025-04-11 23:11Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x through LS.FA.P150, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allow remote authenticated users to inject arbitrary web script or HTML by using (1) SNMP or (2) the Embedded Web Server (EWS) to set the (a) Contact or (b) Location field. Certain Lexmark devices are vulnerable to unverified password changes and stored cross-site scripting attacks. Lexmark Laser Printers is a laser printer device. The Lexmark Laser Printers management web interface fails to properly filter the user input to the \"Location\" and \"Contact Name\" fields of the \"General Settings\" configuration page, allowing remote attackers to exploit the vulnerability to inject malicious scripts or HTML code when malicious data is viewed. Get sensitive information or hijack user sessions. Lexmark Laser Printers are prone to an HTML-injection vulnerability because they fail to sanitize user-supplied input. Successful exploits will allow attacker-supplied HTML and script code to run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201402-0120",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "c52x",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "ls.fa.p150"
},
{
"model": "c53x",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "ls.sw.p069"
},
{
"model": "c920",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "ls.ta.p152"
},
{
"model": "c935dn",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lc.jo.p091"
},
{
"model": "e250",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "le.pm.p126"
},
{
"model": "e350",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "le.ph.p129"
},
{
"model": "e450",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "lm.sz.p124"
},
{
"model": "t64x",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "ls.st.p343"
},
{
"model": "w840",
"scope": "lte",
"trust": 1.8,
"vendor": "lexmark",
"version": "ls.ha.p252"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer w840",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer c920",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer t64x",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer c53x",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer c935dn",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer c52x",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer e450",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer e350",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer e250",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "e350",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "le.ph.p129"
},
{
"model": "e250",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "le.pm.p126"
},
{
"model": "c935dn",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "lc.jo.p091"
},
{
"model": "e450",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "lm.sz.p124"
},
{
"model": "c920",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "ls.ta.p152"
},
{
"model": "w840",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "ls.ha.p252"
},
{
"model": "c52x",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "ls.fa.p150"
},
{
"model": "t64x",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "ls.st.p343"
},
{
"model": "c53x",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "ls.sw.p069"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#108062"
},
{
"db": "CNVD",
"id": "CNVD-2014-00768"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005983"
},
{
"db": "CNNVD",
"id": "CNNVD-201402-019"
},
{
"db": "NVD",
"id": "CVE-2013-6033"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:lexmark:c52x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c53x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c920",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c935dn",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e250",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e350",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e450",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:t64x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:w840",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-005983"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Jeff Popio",
"sources": [
{
"db": "BID",
"id": "65277"
}
],
"trust": 0.3
},
"cve": "CVE-2013-6033",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"confidentialityImpact": "NONE",
"exploitabilityScore": 6.8,
"id": "CVE-2013-6033",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "LOW",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 4.9,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 6.8,
"id": "CNVD-2014-00768",
"impactScore": 4.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-6033",
"trust": 1.0,
"value": "LOW"
},
{
"author": "NVD",
"id": "CVE-2013-6033",
"trust": 0.8,
"value": "Low"
},
{
"author": "CNVD",
"id": "CNVD-2014-00768",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201402-019",
"trust": 0.6,
"value": "LOW"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-00768"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005983"
},
{
"db": "CNNVD",
"id": "CNNVD-201402-019"
},
{
"db": "NVD",
"id": "CVE-2013-6033"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x through LS.FA.P150, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allow remote authenticated users to inject arbitrary web script or HTML by using (1) SNMP or (2) the Embedded Web Server (EWS) to set the (a) Contact or (b) Location field. Certain Lexmark devices are vulnerable to unverified password changes and stored cross-site scripting attacks. Lexmark Laser Printers is a laser printer device. The Lexmark Laser Printers management web interface fails to properly filter the user input to the \\\"Location\\\" and \\\"Contact Name\\\" fields of the \\\"General Settings\\\" configuration page, allowing remote attackers to exploit the vulnerability to inject malicious scripts or HTML code when malicious data is viewed. Get sensitive information or hijack user sessions. Lexmark Laser Printers are prone to an HTML-injection vulnerability because they fail to sanitize user-supplied input. \nSuccessful exploits will allow attacker-supplied HTML and script code to run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-6033"
},
{
"db": "CERT/CC",
"id": "VU#108062"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005983"
},
{
"db": "CNVD",
"id": "CNVD-2014-00768"
},
{
"db": "BID",
"id": "65277"
}
],
"trust": 3.15
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#108062",
"trust": 3.8
},
{
"db": "NVD",
"id": "CVE-2013-6033",
"trust": 3.3
},
{
"db": "BID",
"id": "65277",
"trust": 2.5
},
{
"db": "OSVDB",
"id": "102752",
"trust": 1.6
},
{
"db": "JVN",
"id": "JVNVU92568059",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005983",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2014-00768",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201402-019",
"trust": 0.6
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#108062"
},
{
"db": "CNVD",
"id": "CNVD-2014-00768"
},
{
"db": "BID",
"id": "65277"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005983"
},
{
"db": "CNNVD",
"id": "CNNVD-201402-019"
},
{
"db": "NVD",
"id": "CVE-2013-6033"
}
]
},
"id": "VAR-201402-0120",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-00768"
}
],
"trust": 1.6
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-00768"
}
]
},
"last_update_date": "2025-04-11T23:11:57.621000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "TE585 (HTML Vulnerability in \u0027Contact\u0027 and \u0027Location\u0027 Settings)",
"trust": 0.8,
"url": "http://support.lexmark.com/index?page=content\u0026id=TE585\u0026locale=EN\u0026userlocale=EN_US"
},
{
"title": "Lexmark Laser Printers HTML Injection Vulnerability Patch",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/43415"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-00768"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005983"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-79",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2013-005983"
},
{
"db": "NVD",
"id": "CVE-2013-6033"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.0,
"url": "http://www.kb.cert.org/vuls/id/108062"
},
{
"trust": 1.6,
"url": "http://www.securityfocus.com/bid/65277"
},
{
"trust": 1.6,
"url": "http://www.osvdb.org/102752"
},
{
"trust": 1.6,
"url": "http://support.lexmark.com/index?page=content\u0026id=te585"
},
{
"trust": 0.8,
"url": "about vulnerability notes"
},
{
"trust": 0.8,
"url": "contact us about this vulnerability"
},
{
"trust": 0.8,
"url": "provide a vendor statement"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-6033"
},
{
"trust": 0.8,
"url": "http://jvn.jp/vu/jvnvu92568059/index.html"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-6033"
},
{
"trust": 0.3,
"url": "http://www.lexmark.com/"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#108062"
},
{
"db": "CNVD",
"id": "CNVD-2014-00768"
},
{
"db": "BID",
"id": "65277"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005983"
},
{
"db": "CNNVD",
"id": "CNNVD-201402-019"
},
{
"db": "NVD",
"id": "CVE-2013-6033"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#108062"
},
{
"db": "CNVD",
"id": "CNVD-2014-00768"
},
{
"db": "BID",
"id": "65277"
},
{
"db": "JVNDB",
"id": "JVNDB-2013-005983"
},
{
"db": "CNNVD",
"id": "CNNVD-201402-019"
},
{
"db": "NVD",
"id": "CVE-2013-6033"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-01-31T00:00:00",
"db": "CERT/CC",
"id": "VU#108062"
},
{
"date": "2014-02-13T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-00768"
},
{
"date": "2014-01-31T00:00:00",
"db": "BID",
"id": "65277"
},
{
"date": "2014-02-05T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-005983"
},
{
"date": "2014-02-08T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201402-019"
},
{
"date": "2014-02-04T05:39:08.213000",
"db": "NVD",
"id": "CVE-2013-6033"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-01-31T00:00:00",
"db": "CERT/CC",
"id": "VU#108062"
},
{
"date": "2014-02-13T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-00768"
},
{
"date": "2014-01-31T00:00:00",
"db": "BID",
"id": "65277"
},
{
"date": "2014-02-05T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2013-005983"
},
{
"date": "2014-02-08T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201402-019"
},
{
"date": "2025-04-11T00:51:21.963000",
"db": "NVD",
"id": "CVE-2013-6033"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201402-019"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lexmark laser printers contain multiple vulnerabilities",
"sources": [
{
"db": "CERT/CC",
"id": "VU#108062"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "XSS",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201402-019"
}
],
"trust": 0.6
}
}
VAR-201003-0257
Vulnerability from variot - Updated: 2025-04-11 23:10Stack-based buffer overflow in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser printers and multi-function printers allows remote attackers to execute arbitrary code or cause a denial of service (device hang) via a long argument to a PJL INQUIRE command. Lexmark laser printers are popular printer devices. The attacker submits a specially constructed PJL command to the printer, which can inject information into the embedded microprocessor stack, and successfully exploit the vulnerability to execute arbitrary code on the affected printer. Multiple Lexmark laser printers are prone to a remote stack-based buffer-overflow vulnerability because the devices fail to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code. Failed exploit attempts will result in a denial-of-service condition
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201003-0257",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "x94x",
"scope": null,
"trust": 1.4,
"vendor": "lexmark",
"version": null
},
{
"model": "x94x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "z15xx net.mh.n206",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "z2420 net.ar.n204",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "lc.br.p049",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x94x"
},
{
"model": "lp.sp.p112",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x86x"
},
{
"model": "lc4.be.p457",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x85x"
},
{
"model": "x782e lc2.to.p305c",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x772e lc2.tr.p275",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "lr.fl.p224b",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x73x"
},
{
"model": "lr.mn.p224a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x65x"
},
{
"model": "x64xef lc2.ti.p305a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "lc2.mc.p307a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x646"
},
{
"model": "lc2.mc.p307a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x644"
},
{
"model": "lc2.mb.p307b",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x642"
},
{
"model": "ll.el.p424",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x546"
},
{
"model": "ll.el.p424",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x544"
},
{
"model": "ll.el.p424",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x543"
},
{
"model": "lr.bs.p224a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x46x"
},
{
"model": "ll.bz.p424",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x36x"
},
{
"model": "lm1.mt.p110h",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x264"
},
{
"model": "w850 lp.jb.p108ws",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ls.ha.p121",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t656 lsj.sj.p019",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t654 lr.jp.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t652 lr.jp.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t650 lr.jp.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t64x ls.st.p240",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e462 lr.lbh.p224cws",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e460 lr.lbh.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e450 lm.sz.p113vcref",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360dn ll.lbm.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360d ll.lbl.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e260 ll.lbl.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c935dn lc.jo.p051",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c920 ls.ta.p127",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c78x lc.io.p165a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c77x lc.cm.p027b",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c73x lr.sk.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c546 lu.as.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c544 ll.as.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c543 ll.as.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c540 ll.as.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c53x ls.sw.p026avc",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c52x ls.fa.p129",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "lc.br.p051hds1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x94x"
},
{
"model": "lc.br.p051hds",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x94x"
},
{
"model": "lp.lp.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x86x"
},
{
"model": "lp.lp.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x86x"
},
{
"model": "lc4.be.p457s1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x85x"
},
{
"model": "lc4.be.p457s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x85x"
},
{
"model": "x782e lc2.to.p305cs1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x782e lc2.to.p305cs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x772e lc2.tr.p275s1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x772e lc2.tr.p275s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "lr.fl.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x73x"
},
{
"model": "lr.fl.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x73x"
},
{
"model": "lr.mn.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x65x"
},
{
"model": "lr.mn.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x65x"
},
{
"model": "x64xef lc2.ti.p305as1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x64xef lc2.ti.p305as",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "lc2.mc.p307as1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x646"
},
{
"model": "lc2.mc.p307as",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x646"
},
{
"model": "lc2.mc.p307as1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x644"
},
{
"model": "lc2.mc.p307as",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x644"
},
{
"model": "lc2.mb.p307bs1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x642"
},
{
"model": "lc2.mb.p307bs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x642"
},
{
"model": "ll.el.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x546"
},
{
"model": "ll.el.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x544"
},
{
"model": "ll.el.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x543"
},
{
"model": "lr.bs.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x46x"
},
{
"model": "lr.bs.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x46x"
},
{
"model": "ll.bz.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x36x"
},
{
"model": "lm1.mt.p214",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x264"
},
{
"model": "w850 lp.jb.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w850 lp.jb.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ls.ha.p236lpcs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ls.ha.p225s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ls.ha.p121s1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ls.ha.p121s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ld.ha.fm139s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ld.ha.bc104s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t656 lsj.sj.p019s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t654 lr.jp.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t654 lr.jp.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t652 lr.jp.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t652 lr.jp.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t650 lr.jp.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t650 lr.jp.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t64x ls.st.p240s1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t64x ls.st.p240s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t64x ls.st.p240lpcs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t64x ld.st.fm152s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e462 lr.lbh.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e462 lr.lbh.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e460 lr.lbh.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e460 lr.lbh.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e450 lm.sz.p113vcres1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e450 lm.sz.p113vcres",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360dn ll.lbm.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360d ll.lbl.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e260 ll.lbl.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c935dn lc.jo.p051s1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c935dn lc.jo.p051s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c920 ls.ta.p127s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c920 ls.ta.p127lpcs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c920 ls.ta.p127eps",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c920 ld.ta.fm130s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c920 ld.ta.bc109s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c78x lc.io.p165as1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c78x lc.io.p165as",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c77x lc.cm.p027bs1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c77x lc.cm.p027bs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c77x lc.cm.p027blpcs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c73x lr.sk.p311h",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c73x lr.sk.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c546 lu.as.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c544 ll.as.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c543 ll.as.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c540 ll.as.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c53x ls.sw.p027lpcs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c53x ls.sw.p026avcs1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c53x ls.sw.p026avcs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c52x ls.fa.p129s1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c52x ls.fa.p129s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c52x ls.fa.p129lpcs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c52x ld.fa.fm131s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0414"
},
{
"db": "BID",
"id": "38901"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004501"
},
{
"db": "CNNVD",
"id": "CNNVD-201003-333"
},
{
"db": "NVD",
"id": "CVE-2010-0619"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:lexmark:x94x",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-004501"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Francis Provencher",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201003-333"
}
],
"trust": 0.6
},
"cve": "CVE-2010-0619",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "HIGH",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 7.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 4.9,
"id": "CVE-2010-0619",
"impactScore": 9.5,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:H/Au:N/C:C/I:P/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2010-0619",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2010-0619",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-201003-333",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-004501"
},
{
"db": "CNNVD",
"id": "CNNVD-201003-333"
},
{
"db": "NVD",
"id": "CVE-2010-0619"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Stack-based buffer overflow in the base, IPDS DLE, Forms DLE, Barcode DLE, Prescribe DLE, and Printcryption DLE components on certain Lexmark laser printers and multi-function printers allows remote attackers to execute arbitrary code or cause a denial of service (device hang) via a long argument to a PJL INQUIRE command. Lexmark laser printers are popular printer devices. The attacker submits a specially constructed PJL command to the printer, which can inject information into the embedded microprocessor stack, and successfully exploit the vulnerability to execute arbitrary code on the affected printer. Multiple Lexmark laser printers are prone to a remote stack-based buffer-overflow vulnerability because the devices fail to perform adequate boundary checks on user-supplied data. \nAttackers can exploit this issue to execute arbitrary code. Failed exploit attempts will result in a denial-of-service condition",
"sources": [
{
"db": "NVD",
"id": "CVE-2010-0619"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004501"
},
{
"db": "CNVD",
"id": "CNVD-2010-0414"
},
{
"db": "BID",
"id": "38901"
}
],
"trust": 2.43
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2010-0619",
"trust": 3.3
},
{
"db": "BID",
"id": "38901",
"trust": 1.9
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004501",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2010-0414",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20100322 {PRL} LEXMARK MULTIPLE LASER PRINTER REMOTE STACK OVERFLOW",
"trust": 0.6
},
{
"db": "NSFOCUS",
"id": "14690",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201003-333",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0414"
},
{
"db": "BID",
"id": "38901"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004501"
},
{
"db": "CNNVD",
"id": "CNNVD-201003-333"
},
{
"db": "NVD",
"id": "CVE-2010-0619"
}
]
},
"id": "VAR-201003-0257",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0414"
}
],
"trust": 1.35
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0414"
}
]
},
"last_update_date": "2025-04-11T23:10:09.591000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "TE84",
"trust": 0.8,
"url": "http://support.lexmark.com/index?page=content\u0026id=TE84\u0026locale=EN\u0026userlocale=EN_US"
},
{
"title": "Lexmark Laser Printer PJL Patch for Remote Stack Buffer Overflow Vulnerability",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/2228"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0414"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004501"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-004501"
},
{
"db": "NVD",
"id": "CVE-2010-0619"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://support.lexmark.com/index?page=content\u0026id=te84\u0026locale=en\u0026userlocale=en_us"
},
{
"trust": 1.6,
"url": "http://www.securityfocus.com/bid/38901"
},
{
"trust": 1.0,
"url": "http://www.securityfocus.com/archive/1/510251/100/0/threaded"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0619"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-0619"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/510251/100/0/threaded"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/14690"
},
{
"trust": 0.3,
"url": "http://www.lexmark.com/"
},
{
"trust": 0.3,
"url": "/archive/1/510251"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0414"
},
{
"db": "BID",
"id": "38901"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004501"
},
{
"db": "CNNVD",
"id": "CNNVD-201003-333"
},
{
"db": "NVD",
"id": "CVE-2010-0619"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2010-0414"
},
{
"db": "BID",
"id": "38901"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004501"
},
{
"db": "CNNVD",
"id": "CNNVD-201003-333"
},
{
"db": "NVD",
"id": "CVE-2010-0619"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2010-03-23T00:00:00",
"db": "CNVD",
"id": "CNVD-2010-0414"
},
{
"date": "2010-03-23T00:00:00",
"db": "BID",
"id": "38901"
},
{
"date": "2012-09-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2010-004501"
},
{
"date": "2010-03-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201003-333"
},
{
"date": "2010-03-24T22:45:15.997000",
"db": "NVD",
"id": "CVE-2010-0619"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2010-03-23T00:00:00",
"db": "CNVD",
"id": "CNVD-2010-0414"
},
{
"date": "2010-03-23T00:00:00",
"db": "BID",
"id": "38901"
},
{
"date": "2012-09-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2010-004501"
},
{
"date": "2010-03-25T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201003-333"
},
{
"date": "2025-04-11T00:51:21.963000",
"db": "NVD",
"id": "CVE-2010-0619"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201003-333"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "specific Lexmark Laser printer stack-based buffer overflow vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-004501"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer overflow",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201003-333"
}
],
"trust": 0.6
}
}
VAR-201005-0054
Vulnerability from variot - Updated: 2025-04-11 22:54The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, 25xxN, and other models, allows remote attackers to cause a denial of service (operating system halt) via a malformed HTTP Authorization header. Lexmark printers are currently very popular printer devices on the market. A remote attacker could trigger this vulnerability by sending a malicious request with invalid characters to the Authorization field of the HTTP header sent to TCP port 80, 443, 8000, or 631, causing the printer to crash. Exploiting this issue allows remote attackers to crash the affected device, resulting in a denial-of-service condition
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201005-0054",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "c510",
"scope": null,
"trust": 1.4,
"vendor": "lexmark",
"version": null
},
{
"model": "e120",
"scope": null,
"trust": 1.4,
"vendor": "lexmark",
"version": null
},
{
"model": "e238",
"scope": null,
"trust": 1.4,
"vendor": "lexmark",
"version": null
},
{
"model": "e23x",
"scope": null,
"trust": 1.4,
"vendor": "lexmark",
"version": null
},
{
"model": "e240",
"scope": null,
"trust": 1.4,
"vendor": "lexmark",
"version": null
},
{
"model": "e240n",
"scope": null,
"trust": 1.4,
"vendor": "lexmark",
"version": null
},
{
"model": "e250",
"scope": null,
"trust": 1.4,
"vendor": "lexmark",
"version": null
},
{
"model": "e33x",
"scope": null,
"trust": 1.4,
"vendor": "lexmark",
"version": null
},
{
"model": "e34x",
"scope": null,
"trust": 1.4,
"vendor": "lexmark",
"version": null
},
{
"model": "e350",
"scope": null,
"trust": 1.4,
"vendor": "lexmark",
"version": null
},
{
"model": "w850",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "c543",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x64xef",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x782e",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x86x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "w840",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "c540",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "t430",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "c510",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "c78x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x546",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "c53x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "t654",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "n70xxe",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e450",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "c920",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "t64x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e238",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x73x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "c52x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e360d",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "t652",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "c935dn",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e260",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x646",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x642",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e240",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "25xxn",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e23x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e460",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "t656",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x422",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "n4050e",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x20x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x26x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x34x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x543",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "c73x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "t650",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e34x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "c544",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "c77x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e240n",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x644",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "n4000",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x46x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e120",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x36x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x65x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "n8130",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e462",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x85x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "n8120",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x544",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e250",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e360dn",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x772e",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "c546",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "x94x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e33x",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "e350",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "25xxn",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "c52x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "c53x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "c540",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "c543",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "c544",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "c546",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "c73x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "c77x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "c78x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "c920",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "c935dn",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "e260",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "e360d",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "e360dn",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "e450",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "e460",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "e462",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "n4000",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "n4050e",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "n70xxe",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "n8120",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "n8130",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "t430",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "t64x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "t650",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "t652",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "t654",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "t656",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "w840",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "w850",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x20x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x26x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x34x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x36x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x422",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x46x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x543",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x544",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x546",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x642",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x644",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x646",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x64xef",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x65x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x73x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x772e",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x782e",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x85x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x86x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "x94x",
"scope": null,
"trust": 0.8,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer 25xxn",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer c935dn",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer e462",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer n4000",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer t656",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer w840",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
},
{
"model": "laser printer",
"scope": "eq",
"trust": 0.6,
"vendor": "lexmark",
"version": "x94x"
},
{
"model": "nc.nps.n129",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x94x"
},
{
"model": "lc.br.p049",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x94x"
},
{
"model": "nr.aps.n332",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x86x"
},
{
"model": "lp.sp.p112",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x86x"
},
{
"model": "nc2.nps.n222",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x85x"
},
{
"model": "lc4.be.p457",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x85x"
},
{
"model": "x782e nc2.nps.n222",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x782e lc2.to.p305c",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x772e nc2.nps.n222",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x772e lc.tr.p275",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "nr.aps.n447a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x73x"
},
{
"model": "lr.fl.p224b",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x73x"
},
{
"model": "nr.aps.n447a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x65x"
},
{
"model": "lr.mn.p224a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x65x"
},
{
"model": "x64xef nc2.nps.n222",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x64xef lc2.ti.p305a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "nc2.nps.n222s",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x646"
},
{
"model": "lc2.mc.p307a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x646"
},
{
"model": "nc2.nps.n222s",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x644"
},
{
"model": "lc2.mc.p307a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x644"
},
{
"model": "nc2.nps.n222",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x642"
},
{
"model": "lc2.mb.p307b",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x642"
},
{
"model": "nr.aps.n448",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x546"
},
{
"model": "ll.el.p424",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x546"
},
{
"model": "nr.aps.n448",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x544"
},
{
"model": "ll.el.p424",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x544"
},
{
"model": "nr.aps.n448",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x543"
},
{
"model": "ll.el.p424",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x543"
},
{
"model": "nr.aps.n447a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x46x"
},
{
"model": "lr.bs.p224a",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x46x"
},
{
"model": "gn.aq.p202",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x422"
},
{
"model": "nr.aps.n448",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x36x"
},
{
"model": "ll.bz.p424",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x36x"
},
{
"model": "401.ec4",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x34x"
},
{
"model": "nr.aps.n448",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x26x"
},
{
"model": "ll.bz.p424",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x26x"
},
{
"model": "nm.aps.n048",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x20x"
},
{
"model": "lm1.mt.p110h",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "x20x"
},
{
"model": "w850 nr.aps.n332",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w850 lp.jb.p108ws",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ns.np.n118",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ls.ha.p121",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t656 nr.aps.n402",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t656 lsj.sj.p019",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t654 nr.aps.n447a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t654 lr.jp.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t652 nr.aps.n447a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t652 lr.jp.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t650 nr.aps.n447a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t650 lr.jp.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t64x ns.np.n219",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t64x ls.st.p240",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t430 jx.ju.p101",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n8130 nr.aps.n368",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n8120 nr.aps.n368",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n70xxe lc.co.n054",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n4050e go.go.n106",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n4000 ph2.me.n134",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e462 nr.aps.n447a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e462 lr.lbh.p224cws",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e460 nr.aps.n447a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e460 lr.lbh.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e450 nm.na.n098a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e450 lm.sz.p113vcref",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360dn nr.aps.n448",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360dn ll.lbm.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360d nr.aps.n448",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360d ll.lbl.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e350 le.ph.p121",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e34x br.h.p204",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e33x 141.c09",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e260 nr.aps.n448",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e260 ll.lbl.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e250 le.pm.p121",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e240n br.q.p204",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e240 br.m.p204",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e23x 141.c09",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e238 br.m.p204",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e120 le.ul.p040",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c935dn nc.nps.n129",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c935dn lc.jo.p051",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c920 ns.np.n219",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c920 ls.ta.p127",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c78x nc2.nps.n222",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c78x lc.io.p165a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c77x ncc.nps.n107",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c77x lc.cm.p027b",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c73x nr.aps.n447a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c73x lr.sk.p224a",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c546 nr.aps.n448",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c546 lu.as.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c544 nr.aps.n448",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c544 ll.as.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c543 nr.aps.n448",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c543 ll.as.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c540 nr.aps.n448",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c540 ll.as.p424",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c53x nsf.np.n026",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c53x ls.sw.p026avc",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c52x ns.np.n219",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c52x ls.fa.p129",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c510",
"scope": "eq",
"trust": 0.3,
"vendor": "lexmark",
"version": "891.004"
},
{
"model": "25xxn ncl.na.n104",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "25xxn lcl.cu.p105",
"scope": null,
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "nc.nps.n129s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x94x"
},
{
"model": "lc.br.p051hds",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x94x"
},
{
"model": "np.aps.n332a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x86x"
},
{
"model": "lp.sp.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x86x"
},
{
"model": "nc2.nps.n222s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x85x"
},
{
"model": "lc4.be.p457s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x85x"
},
{
"model": "x782e nc2.nps.n222s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x782e lc2.to.p305cs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x772e nc2.nps.n222s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x772e lc2.tr.p275s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "nr.aps.n447b",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x73x"
},
{
"model": "lr.fl.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x73x"
},
{
"model": "nr.aps.n447b",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x65x"
},
{
"model": "lr.mn.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x65x"
},
{
"model": "x64xef nc2.nps.n222s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "x64xef lc2.ti.p305as",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "nc2.nps.n222s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x646"
},
{
"model": "lc2.mc.p307as",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x646"
},
{
"model": "nc2.nps.n222s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x644"
},
{
"model": "lc2.mc.p307as",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x644"
},
{
"model": "nc2.nps.n222s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x642"
},
{
"model": "lc2.mb.p307bs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x642"
},
{
"model": "nr.aps.n449",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x546"
},
{
"model": "ll.el.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x546"
},
{
"model": "nr.aps.n449",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x544"
},
{
"model": "ll.el.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x544"
},
{
"model": "nr.aps.n449",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x543"
},
{
"model": "ll.el.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x543"
},
{
"model": "nr.aps.n447b",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x46x"
},
{
"model": "lr.bs.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x46x"
},
{
"model": "nr.aps.n449",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x36x"
},
{
"model": "ll.bz.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x36x"
},
{
"model": "nr.aps.n449",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x26x"
},
{
"model": "ll.bz.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x26x"
},
{
"model": "nm.aps.n049",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x20x"
},
{
"model": "lm1.mt.p214",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": "x20x"
},
{
"model": "w850 np.aps.n332a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w850 lp.jb.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ns.np.n118s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "w840 ls.ha.p121s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t656 nr.aps.n402s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t656 lsj.sj.p019s1",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t654 nr.aps.n447b",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t654 lr.jp.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t652 nr.aps.n447b",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t652 lr.jp.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t650 nr.aps.n447b",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t650 lr.jp.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t64x ns.np.n219s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "t64x ls.st.p240s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n8130 nr.aps.447c",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n8120 nr.aps.447c",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n70xxe lc.co.n069",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n4050e go.go.n206",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "n4000 lc.md.p012d",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e462 nr.aps.n447b",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e462 lr.lbh.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e460 nr.aps.n447b",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e460 lr.lbh.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e450 nm.na.n098as",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e450 lm.sz.p113vcres",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360dn nr.aps.n449",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360dn ll.lbm.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360d nr.aps.n449",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e360d ll.lbl.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e260 nr.aps.n449",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "e260 ll.lbl.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c935dn nc.nps.n129s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c935dn lc.jo.p051s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c920 ns.np.n219s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c920 ls.ta.p127s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c78x nc2.nps.n222s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c78x lc.io.p165as",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c77x ncc.nps.n107s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c77x lc.cm.p027bs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c73x nr.aps.n447b",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c73x lr.sk.p311e",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c546 nr.aps.n449",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c546 lu.as.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c544 nr.aps.n449",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c544 ll.as.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c543 nr.aps.n449",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c543 ll.as.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c540 nr.aps.n449",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c540 ll.as.p429a",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c53x nsf.np.n026s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c53x ls.sw.p026avcs",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c52x ns.np.n219s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "c52x ls.fa.p129s",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "25xxn ncl.na.n105",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
},
{
"model": "25xxn lc.cu.p106",
"scope": "ne",
"trust": 0.3,
"vendor": "lexmark",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0780"
},
{
"db": "BID",
"id": "39967"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004440"
},
{
"db": "CNNVD",
"id": "CNNVD-201005-018"
},
{
"db": "NVD",
"id": "CVE-2010-0101"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:lexmark:25xxn",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c510",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c52x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c53x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c540",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c543",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c544",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c546",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c73x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c77x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c78x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c920",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:c935dn",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e120",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e238",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e23x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e240",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e240n",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e250",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e260",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e33x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e34x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e350",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e360d",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e360dn",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e450",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e460",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:e462",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:n4000",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:n4050e",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:n70xxe",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:n8120",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:n8130",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:t430",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:t64x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:t650",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:t652",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:t654",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:t656",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:w840",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:w850",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x20x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x26x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x34x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x36x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x422",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x46x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x543",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x544",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x546",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x642",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x644",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x646",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x64xef",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x65x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x73x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x772e",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x782e",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x85x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x86x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:lexmark:x94x",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-004440"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lexmark",
"sources": [
{
"db": "BID",
"id": "39967"
}
],
"trust": 0.3
},
"cve": "CVE-2010-0101",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2010-0101",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2010-0101",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2010-0101",
"trust": 0.8,
"value": "High"
},
{
"author": "CNNVD",
"id": "CNNVD-201005-018",
"trust": 0.6,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-004440"
},
{
"db": "CNNVD",
"id": "CNNVD-201005-018"
},
{
"db": "NVD",
"id": "CVE-2010-0101"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, 25xxN, and other models, allows remote attackers to cause a denial of service (operating system halt) via a malformed HTTP Authorization header. Lexmark printers are currently very popular printer devices on the market. A remote attacker could trigger this vulnerability by sending a malicious request with invalid characters to the Authorization field of the HTTP header sent to TCP port 80, 443, 8000, or 631, causing the printer to crash. \nExploiting this issue allows remote attackers to crash the affected device, resulting in a denial-of-service condition",
"sources": [
{
"db": "NVD",
"id": "CVE-2010-0101"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004440"
},
{
"db": "CNVD",
"id": "CNVD-2010-0780"
},
{
"db": "BID",
"id": "39967"
}
],
"trust": 2.43
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2010-0101",
"trust": 3.3
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004440",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2010-0780",
"trust": 0.6
},
{
"db": "SUPPORT.LEXMARK.COM",
"id": "HTTP://SUPPORT.LEXMARK.COM/INDEX?PAGE=CONTENT\u0026ID=TE87\u0026LOCALE=EN\u0026USERLOCALE=EN_US",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201005-018",
"trust": 0.6
},
{
"db": "BID",
"id": "39967",
"trust": 0.3
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0780"
},
{
"db": "BID",
"id": "39967"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004440"
},
{
"db": "CNNVD",
"id": "CNNVD-201005-018"
},
{
"db": "NVD",
"id": "CVE-2010-0101"
}
]
},
"id": "VAR-201005-0054",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0780"
}
],
"trust": 1.5453125
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0780"
}
]
},
"last_update_date": "2025-04-11T22:54:19.325000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "TE87",
"trust": 0.8,
"url": "http://support.lexmark.com/index?page=content\u0026id=TE87\u0026locale=EN\u0026userlocale=EN_US"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-004440"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-20",
"trust": 1.8
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-004440"
},
{
"db": "NVD",
"id": "CVE-2010-0101"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.9,
"url": "http://support.lexmark.com/index?page=content\u0026id=te87\u0026locale=en\u0026userlocale=en_us"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0101"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-0101"
},
{
"trust": 0.6,
"url": "http://support.lexmark.com/index?pmv=print\u0026page=content\u0026locale=en\u0026userlocale=en_us\u0026id=te87"
},
{
"trust": 0.3,
"url": "http://www.lexmark.com/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2010-0780"
},
{
"db": "BID",
"id": "39967"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004440"
},
{
"db": "CNNVD",
"id": "CNNVD-201005-018"
},
{
"db": "NVD",
"id": "CVE-2010-0101"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2010-0780"
},
{
"db": "BID",
"id": "39967"
},
{
"db": "JVNDB",
"id": "JVNDB-2010-004440"
},
{
"db": "CNNVD",
"id": "CNNVD-201005-018"
},
{
"db": "NVD",
"id": "CVE-2010-0101"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2010-05-06T00:00:00",
"db": "CNVD",
"id": "CNVD-2010-0780"
},
{
"date": "2010-04-26T00:00:00",
"db": "BID",
"id": "39967"
},
{
"date": "2012-09-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2010-004440"
},
{
"date": "2010-05-04T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201005-018"
},
{
"date": "2010-05-04T16:00:35.230000",
"db": "NVD",
"id": "CVE-2010-0101"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2010-05-06T00:00:00",
"db": "CNVD",
"id": "CNVD-2010-0780"
},
{
"date": "2010-04-26T00:00:00",
"db": "BID",
"id": "39967"
},
{
"date": "2012-09-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2010-004440"
},
{
"date": "2010-05-04T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201005-018"
},
{
"date": "2025-04-11T00:51:21.963000",
"db": "NVD",
"id": "CVE-2010-0101"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201005-018"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lexmark Built-in type such as laser printer HTTP Denial of service in server (DoS) Vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2010-004440"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "input validation",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201005-018"
}
],
"trust": 0.6
}
}
VAR-200407-0032
Vulnerability from variot - Updated: 2025-04-03 22:38The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a denial of service (server crash, reload, or hang) via an HTTP header with a long Host field, possibly triggering a buffer overflow. T522 Network Printer is prone to a denial-of-service vulnerability. The HTTP service program of the Lexmark printer does not process some HTTP requests correctly. Remote attackers can use this vulnerability to carry out a denial of service attack on the printer WEB service
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200407-0032",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "t522 network printer",
"scope": "eq",
"trust": 1.0,
"vendor": "lexmark",
"version": "*"
},
{
"model": "t522 network printer",
"scope": null,
"trust": 0.9,
"vendor": "lexmark",
"version": null
}
],
"sources": [
{
"db": "BID",
"id": "90589"
},
{
"db": "CNNVD",
"id": "CNNVD-200407-087"
},
{
"db": "NVD",
"id": "CVE-2004-0740"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Peter Kruse\u203b kruse@krusesecurity.dk",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200407-087"
}
],
"trust": 0.6
},
"cve": "CVE-2004-0740",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CVE-2004-0740",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 5.0,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-9170",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2004-0740",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-200407-087",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-9170",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-9170"
},
{
"db": "CNNVD",
"id": "CNNVD-200407-087"
},
{
"db": "NVD",
"id": "CVE-2004-0740"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a denial of service (server crash, reload, or hang) via an HTTP header with a long Host field, possibly triggering a buffer overflow. T522 Network Printer is prone to a denial-of-service vulnerability. The HTTP service program of the Lexmark printer does not process some HTTP requests correctly. Remote attackers can use this vulnerability to carry out a denial of service attack on the printer WEB service",
"sources": [
{
"db": "NVD",
"id": "CVE-2004-0740"
},
{
"db": "BID",
"id": "90589"
},
{
"db": "VULHUB",
"id": "VHN-9170"
}
],
"trust": 1.26
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-9170",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-9170"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2004-0740",
"trust": 2.0
},
{
"db": "XF",
"id": "16752",
"trust": 0.9
},
{
"db": "CNNVD",
"id": "CNNVD-200407-087",
"trust": 0.7
},
{
"db": "BUGTRAQ",
"id": "20040720 DENIAL OF SERVICE VULNERABILITY IN SEVERAL LEXMARK HTTP SERVERS",
"trust": 0.6
},
{
"db": "BID",
"id": "90589",
"trust": 0.4
},
{
"db": "EXPLOIT-DB",
"id": "358",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-9170",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-9170"
},
{
"db": "BID",
"id": "90589"
},
{
"db": "CNNVD",
"id": "CNNVD-200407-087"
},
{
"db": "NVD",
"id": "CVE-2004-0740"
}
]
},
"id": "VAR-200407-0032",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-9170"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-03T22:38:19.941000Z",
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "NVD-CWE-Other",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2004-0740"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16752"
},
{
"trust": 1.0,
"url": "http://marc.info/?l=bugtraq\u0026m=109035701329111\u0026w=2"
},
{
"trust": 0.9,
"url": "http://marc.theaimsgroup.com/?l=bugtraq\u0026m=109035701329111\u0026w=2"
},
{
"trust": 0.9,
"url": "http://xforce.iss.net/xforce/xfdb/16752"
},
{
"trust": 0.1,
"url": "http://marc.info/?l=bugtraq\u0026amp;m=109035701329111\u0026amp;w=2"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-9170"
},
{
"db": "BID",
"id": "90589"
},
{
"db": "CNNVD",
"id": "CNNVD-200407-087"
},
{
"db": "NVD",
"id": "CVE-2004-0740"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-9170"
},
{
"db": "BID",
"id": "90589"
},
{
"db": "CNNVD",
"id": "CNNVD-200407-087"
},
{
"db": "NVD",
"id": "CVE-2004-0740"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2004-07-27T00:00:00",
"db": "VULHUB",
"id": "VHN-9170"
},
{
"date": "2004-07-27T00:00:00",
"db": "BID",
"id": "90589"
},
{
"date": "2004-07-27T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200407-087"
},
{
"date": "2004-07-27T04:00:00",
"db": "NVD",
"id": "CVE-2004-0740"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-07-11T00:00:00",
"db": "VULHUB",
"id": "VHN-9170"
},
{
"date": "2004-07-27T00:00:00",
"db": "BID",
"id": "90589"
},
{
"date": "2005-10-20T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200407-087"
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2004-0740"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200407-087"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lexmark printer HTTP Service Remote Denial of Service Vulnerability",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200407-087"
}
],
"trust": 0.6
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "unknown",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200407-087"
}
],
"trust": 0.6
}
}
VAR-200602-0089
Vulnerability from variot - Updated: 2025-04-03 22:23Unspecified vulnerability in the Lexmark Printer Sharing LexBce Server Service (LexPPS), possibly 8.29 and 9.41, allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based on a vague initial disclosure; details will be updated after the grace period has ended.
TITLE: Lexmark Printers LexBce Server Arbitrary Code Execution
SECUNIA ADVISORY ID: SA18744
VERIFY ADVISORY: http://secunia.com/advisories/18744/
CRITICAL: Moderately critical
IMPACT: System access
WHERE:
From local network
OPERATING SYSTEM: Lexmark X1100 Series http://secunia.com/product/7842/
SOFTWARE: Lexmark LexBce Server (LexPPS) 8.x http://secunia.com/product/7856/ Lexmark LexBce Server (LexPPS) 9.x http://secunia.com/product/7847/
DESCRIPTION: Peter Winter-Smith of NGSSoftware has reported a vulnerability in the LexBce Server Service included with various Lexmark printers, which can be exploited by malicious people to compromise a user's system. This can be exploited to execute arbitrary code on a system with Lexmark printer installed.
NOTE: The service is installed with the printer drivers of Lexmark X1100 series (LexPPS version 8.29), and X2200 series (LexPPS version 9.41). Other Lexmark printers may also have the service installed.
SOLUTION: Disable the service if printer sharing is not required.
PROVIDED AND/OR DISCOVERED BY: Peter Winter-Smith, NGSSoftware.
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"affected_products": {
"_id": null,
"data": [
{
"_id": null,
"model": "printer sharing",
"scope": "eq",
"trust": 1.6,
"vendor": "lexmark",
"version": "8.29"
},
{
"_id": null,
"model": "printer sharing",
"scope": "eq",
"trust": 1.6,
"vendor": "lexmark",
"version": "9.41"
}
],
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200602-090"
},
{
"db": "NVD",
"id": "CVE-2006-0592"
}
]
},
"credits": {
"_id": null,
"data": "Secunia",
"sources": [
{
"db": "PACKETSTORM",
"id": "43675"
}
],
"trust": 0.1
},
"cve": "CVE-2006-0592",
"cvss": {
"_id": null,
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2006-0592",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 1.0,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 7.5,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-16700",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2006-0592",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-200602-090",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-16700",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-16700"
},
{
"db": "CNNVD",
"id": "CNNVD-200602-090"
},
{
"db": "NVD",
"id": "CVE-2006-0592"
}
]
},
"description": {
"_id": null,
"data": "Unspecified vulnerability in the Lexmark Printer Sharing LexBce Server Service (LexPPS), possibly 8.29 and 9.41, allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based on a vague initial disclosure; details will be updated after the grace period has ended. \n\nTITLE:\nLexmark Printers LexBce Server Arbitrary Code Execution\n\nSECUNIA ADVISORY ID:\nSA18744\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/18744/\n\nCRITICAL:\nModerately critical\n\nIMPACT:\nSystem access\n\nWHERE:\n\u003eFrom local network\n\nOPERATING SYSTEM:\nLexmark X1100 Series\nhttp://secunia.com/product/7842/\n\nSOFTWARE:\nLexmark LexBce Server (LexPPS) 8.x\nhttp://secunia.com/product/7856/\nLexmark LexBce Server (LexPPS) 9.x\nhttp://secunia.com/product/7847/\n\nDESCRIPTION:\nPeter Winter-Smith of NGSSoftware has reported a vulnerability in the\nLexBce Server Service included with various Lexmark printers, which\ncan be exploited by malicious people to compromise a user\u0027s system. This can be exploited to execute arbitrary code on a\nsystem with Lexmark printer installed. \n\nNOTE: The service is installed with the printer drivers of Lexmark\nX1100 series (LexPPS version 8.29), and X2200 series (LexPPS version\n9.41). Other Lexmark printers may also have the service installed. \n\nSOLUTION:\nDisable the service if printer sharing is not required. \n\nPROVIDED AND/OR DISCOVERED BY:\nPeter Winter-Smith, NGSSoftware. \n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2006-0592"
},
{
"db": "VULHUB",
"id": "VHN-16700"
},
{
"db": "PACKETSTORM",
"id": "43675"
}
],
"trust": 1.08
},
"external_ids": {
"_id": null,
"data": [
{
"db": "SECUNIA",
"id": "18744",
"trust": 1.8
},
{
"db": "SECTRACK",
"id": "1015593",
"trust": 1.7
},
{
"db": "VUPEN",
"id": "ADV-2006-0481",
"trust": 1.7
},
{
"db": "NVD",
"id": "CVE-2006-0592",
"trust": 1.7
},
{
"db": "CNNVD",
"id": "CNNVD-200602-090",
"trust": 0.7
},
{
"db": "BUGTRAQ",
"id": "20060207 HIGH RISK VULNERABILITY IN LEXMARK PRINTER SHARING SERVICE",
"trust": 0.6
},
{
"db": "XF",
"id": "24581",
"trust": 0.6
},
{
"db": "BID",
"id": "84094",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-16700",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "43675",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-16700"
},
{
"db": "PACKETSTORM",
"id": "43675"
},
{
"db": "CNNVD",
"id": "CNNVD-200602-090"
},
{
"db": "NVD",
"id": "CVE-2006-0592"
}
]
},
"id": "VAR-200602-0089",
"iot": {
"_id": null,
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-16700"
}
],
"trust": 0.7
},
"last_update_date": "2025-04-03T22:23:51.021000Z",
"problemtype_data": {
"_id": null,
"data": [
{
"problemtype": "NVD-CWE-noinfo",
"trust": 1.0
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2006-0592"
}
]
},
"references": {
"_id": null,
"data": [
{
"trust": 1.7,
"url": "http://securitytracker.com/id?1015593"
},
{
"trust": 1.7,
"url": "http://secunia.com/advisories/18744"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/424273/100/0/threaded"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2006/0481"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24581"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/424273/100/0/threaded"
},
{
"trust": 0.6,
"url": "http://www.frsirt.com/english/advisories/2006/0481"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/24581"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/7856/"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/7842/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/7847/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/18744/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-16700"
},
{
"db": "PACKETSTORM",
"id": "43675"
},
{
"db": "CNNVD",
"id": "CNNVD-200602-090"
},
{
"db": "NVD",
"id": "CVE-2006-0592"
}
]
},
"sources": {
"_id": null,
"data": [
{
"db": "VULHUB",
"id": "VHN-16700",
"ident": null
},
{
"db": "PACKETSTORM",
"id": "43675",
"ident": null
},
{
"db": "CNNVD",
"id": "CNNVD-200602-090",
"ident": null
},
{
"db": "NVD",
"id": "CVE-2006-0592",
"ident": null
}
]
},
"sources_release_date": {
"_id": null,
"data": [
{
"date": "2006-02-08T00:00:00",
"db": "VULHUB",
"id": "VHN-16700",
"ident": null
},
{
"date": "2006-02-09T00:56:34",
"db": "PACKETSTORM",
"id": "43675",
"ident": null
},
{
"date": "2006-02-07T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200602-090",
"ident": null
},
{
"date": "2006-02-08T01:02:00",
"db": "NVD",
"id": "CVE-2006-0592",
"ident": null
}
]
},
"sources_update_date": {
"_id": null,
"data": [
{
"date": "2018-10-19T00:00:00",
"db": "VULHUB",
"id": "VHN-16700",
"ident": null
},
{
"date": "2006-03-29T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200602-090",
"ident": null
},
{
"date": "2025-04-03T01:03:51.193000",
"db": "NVD",
"id": "CVE-2006-0592",
"ident": null
}
]
},
"threat_type": {
"_id": null,
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200602-090"
}
],
"trust": 0.6
},
"title": {
"_id": null,
"data": "Lexmark Printer Sharing LexBce Server Service Unknown vulnerability",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200602-090"
}
],
"trust": 0.6
},
"type": {
"_id": null,
"data": "unknown",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200602-090"
}
],
"trust": 0.6
}
}
VAR-202502-3819
Vulnerability from variot - Updated: 2025-03-21 23:23Lexmark MC2535adwe is a color multifunction laser printer.
Lexmark MC2535adwe has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information.
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-202502-3819",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "mc2535adwe",
"scope": null,
"trust": 0.6,
"vendor": "lexmark",
"version": null
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-04747"
}
]
},
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2025-04747",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "CNVD",
"id": "CNVD-2025-04747",
"trust": 0.6,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-04747"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lexmark MC2535adwe is a color multifunction laser printer.\n\nLexmark MC2535adwe has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information.",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-04747"
}
],
"trust": 0.6
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2025-04747",
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-04747"
}
]
},
"id": "VAR-202502-3819",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-04747"
}
],
"trust": 0.06
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-04747"
}
]
},
"last_update_date": "2025-03-21T23:23:56.260000Z",
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2025-04747"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2025-02-24T00:00:00",
"db": "CNVD",
"id": "CNVD-2025-04747"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2025-03-11T00:00:00",
"db": "CNVD",
"id": "CNVD-2025-04747"
}
]
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Lexmark MC2535adwe has unauthorized access vulnerability",
"sources": [
{
"db": "CNVD",
"id": "CNVD-2025-04747"
}
],
"trust": 0.6
}
}