Lucene search

[email protected]CVE-2021-44737

HistoryJan 20, 2022 - 5:15 p.m.

CVE-2021-44737

2022-01-2017:15:00

CWE-22

[email protected]

web.nvd.nist.gov

cve-2021-44737

lexmark

directory traversal

vulnerability

file overwriting

nvd

8.8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

8.3 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

51.3%

JSON

PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files.

CPENameOperatorVersion
lexmark:b2236_firmwarelexmark b2236 firmwareltmslsg.076.294
lexmark:mb2236_firmwarelexmark mb2236 firmwareltmxlsg.076.294
lexmark:ms431_firmwarelexmark ms431 firmwareltmslbd.076.294
lexmark:ms331_firmwarelexmark ms331 firmwareltmslbd.076.294
lexmark:m1342_firmwarelexmark m1342 firmwareltmslbd.076.294
lexmark:b3442_firmwarelexmark b3442 firmwareltmslbd.076.294
lexmark:b3340_firmwarelexmark b3340 firmwareltmslbd.076.294
lexmark:xm1342_firmwarelexmark xm1342 firmwareltmslbd.076.294
lexmark:mx331_firmwarelexmark mx331 firmwareltmxlbd.076.294
lexmark:mx431_firmwarelexmark mx431 firmwareltmxlbd.076.294

CPE	Name	Operator	Version
lexmark:b2236_firmware	lexmark b2236 firmware	lt	mslsg.076.294
lexmark:mb2236_firmware	lexmark mb2236 firmware	lt	mxlsg.076.294
lexmark:ms431_firmware	lexmark ms431 firmware	lt	mslbd.076.294
lexmark:ms331_firmware	lexmark ms331 firmware	lt	mslbd.076.294
lexmark:m1342_firmware	lexmark m1342 firmware	lt	mslbd.076.294
lexmark:b3442_firmware	lexmark b3442 firmware	lt	mslbd.076.294
lexmark:b3340_firmware	lexmark b3340 firmware	lt	mslbd.076.294
lexmark:xm1342_firmware	lexmark xm1342 firmware	lt	mslbd.076.294
lexmark:mx331_firmware	lexmark mx331 firmware	lt	mxlbd.076.294
lexmark:mx431_firmware	lexmark mx431 firmware	lt	mxlbd.076.294

Rows per page:

1-10 of 2351

References

support.lexmark.com/alerts/

www.zerodayinitiative.com/advisories/ZDI-22-333/

8.8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

8.3 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

51.3%

JSON

Related for CVE-2021-44737

prion1 cvelist1 cnvd1 zdi1 openvas1