Lucene search

MitreCVE-2023-26066

HistoryApr 10, 2023 - 8:15 p.m.

CVE-2023-26066

2023-04-1020:15:10

CWE-129

mitre

web.nvd.nist.gov

lexmark

cve-2023-26066

array index

improper validation

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

65.4%

JSON

Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.

Affected configurations

Nvd

Node

lexmarkcxtpc_firmwareRange<cxtpc.081.232

AND

lexmarkcx930Match-

lexmarkcx931Match-

lexmarkcx942Match-

lexmarkcx943Match-

lexmarkcx944Match-

lexmarkxc9325Match-

lexmarkxc9335Match-

lexmarkxc9445Match-

lexmarkxc9455Match-

lexmarkxc9465Match-

Node

lexmarkcstpc_firmwareRange<cstpc.081.232

AND

lexmarkcs943Match-

Node

lexmarkmxtct_firmwareRange<mxtct.081.232

AND

lexmarkmx432Match-

lexmarkxm3142Match-

Node

lexmarkmxtpm_firmwareRange<mxtpm.081.232

AND

lexmarkmx931Match-

Node

lexmarkcxtmm_firmwareRange<cxtmm.081.232

AND

lexmarkcx730Match-

lexmarkcx735Match-

lexmarkxc4342Match-

lexmarkxc4352Match-

Node

lexmarkmslsg_firmwareRange<mslsg.081.232

AND

lexmarkb2236Match-

Node

lexmarkmxlsg_firmwareRange<mxlsg.081.232

AND

lexmarkmb2236Match-

Node

lexmarkmslbd_firmwareRange<mslbd.081.232

AND

lexmarkb3340Match-

lexmarkb3442Match-

lexmarkm1342Match-

lexmarkms331Match-

lexmarkms431Match-

lexmarkms439Match-

Node

lexmarkmxlbd_firmwareRange<mxlbd.081.232

AND

lexmarkmb3442Match-

lexmarkmx331Match-

lexmarkmx431Match-

lexmarkxm1342Match-

Node

lexmarkmsngm_firmwareRange<msngm.081.232

AND

lexmarkb2338Match-

lexmarkb2442Match-

lexmarkb2546Match-

lexmarkb2650Match-

lexmarkm1242Match-

lexmarkm1246Match-

lexmarkm3250Match-

lexmarkms321Match-

lexmarkms421Match-

lexmarkms521Match-

lexmarkms621Match-

lexmarkms622Match-

Node

lexmarkmxngm_firmwareRange<mxngm.081.232

AND

lexmarkmb2338Match-

lexmarkmx321Match-

Node

lexmarkmxtgm_firmwareRange<mxtgm.081.232

AND

lexmarkmb2442Match-

lexmarkmb2546Match-

lexmarkmb2650Match-

lexmarkmx421Match-

lexmarkmx521Match-

lexmarkmx522Match-

lexmarkmx622Match-

lexmarkxm1242Match-

lexmarkxm1246Match-

lexmarkxm3250Match-

Node

lexmarkmsngw_firmwareRange<msngw.081.232

AND

lexmarkb2865Match-

lexmarkms725Match-

lexmarkms821Match-

lexmarkms823Match-

lexmarkms825Match-

Node

lexmarkmstgw_firmwareRange<mstgw.081.232

AND

lexmarkm5255Match-

lexmarkm5270Match-

lexmarkms822Match-

lexmarkms826Match-

Node

lexmarkmxtgw_firmwareRange<mxtgw.081.232

AND

lexmarkmb2770Match-

lexmarkmx721Match-

lexmarkmx722Match-

lexmarkmx725Match-

lexmarkmx822Match-

lexmarkmx826Match-

lexmarkxm5365Match-

lexmarkxm5370Match-

lexmarkxm7355Match-

lexmarkxm7370Match-

Node

lexmarkcslbn_firmwareRange<cslbn.081.232

AND

lexmarkc3426Match-

lexmarkcs431Match-

lexmarkcs439Match-

Node

lexmarkcslbl_firmwareRange<cslbl.081.232

AND

lexmarkc3224Match-

lexmarkc3326Match-

lexmarkcs331Match-

Node

lexmarkcslbn_firmwareRange<cslbn.081.232

AND

lexmarkc2326Match-

Node

lexmarkcxlbn_firmwareRange<cxlbn.081.232

AND

lexmarkcx431Match-

lexmarkmc3426Match-

lexmarkxc2326Match-

Node

lexmarkcxlbl_firmwareRange<cxlbl.081.232

AND

lexmarkmc3224Match-

lexmarkmc3326Match-

Node

lexmarkcstzj_firmwareRange<cstzj.081.232

AND

lexmarkc2240Match-

lexmarkcs622Match-

Node

lexmarkcsnzj_firmwareRange<csnzj.081.232

AND

lexmarkc2325Match-

lexmarkc2425Match-

lexmarkc2535Match-

lexmarkcs421Match-

lexmarkcs521Match-

Node

lexmarkcsnzj_firmwareRange<csnzj.081.232

AND

lexmarkc2325Match-

lexmarkc2425Match-

lexmarkc2535Match-

lexmarkcs421Match-

lexmarkcs521Match-

Node

lexmarkcxtzj_firmwareRange<cxtzj.081.232

AND

lexmarkcx522Match-

lexmarkcx622Match-

lexmarkcx625Match-

lexmarkmc2535Match-

lexmarkmc2640Match-

lexmarkxc2235Match-

lexmarkxc4240Match-

Node

lexmarkcsnzj_firmwareRange<csnzj.081.232

AND

lexmarkc2325Match-

lexmarkc2425Match-

lexmarkc2535Match-

lexmarkcs421Match-

lexmarkcs521Match-

lexmarkcx421Match-

lexmarkmc232Match-

lexmarkmc2425Match-

Node

lexmarklw80_firmwareRange<lw80.sb7.p234

AND

lexmarkmx610Match-

lexmarkmx611Match-

lexmarkmx617Match-

lexmarkxm3150Match-

Node

lexmarklw80_firmwareRange<lw80.dn2.p234

AND

lexmarkm5163dnMatch-

lexmarkms710Match-

lexmarkms711Match-

lexmarkms810dnMatch-

lexmarkms811Match-

lexmarkms812dnMatch-

lexmarkms817Match-

lexmarkms818Match-

Node

lexmarklw80_firmwareRange<lw80.dn4.p234

AND

lexmarkm5155Match-

lexmarkm5163deMatch-

lexmarkms810deMatch-

Node

lexmarklw80_firmwareRange<lw80.dn7.p234

AND

lexmarkm5170Match-

lexmarkms812deMatch-

Node

lexmarklw80_firmwareRange<lw80.dn7.p234

AND

lexmarkm5170Match-

lexmarkms812deMatch-

Node

lexmarklw80_firmwareRange<lw80.tu.p234

AND

lexmarkmx710Match-

lexmarkmx711Match-

lexmarkmx717Match-

lexmarkmx718Match-

lexmarkmx810Match-

lexmarkmx811Match-

lexmarkmx812Match-

lexmarkxm5163Match-

lexmarkxm5170Match-

lexmarkxm5263Match-

lexmarkxm5270Match-

lexmarkxm7155Match-

lexmarkxm7163Match-

lexmarkxm7170Match-

lexmarkxm7263Match-

lexmarkxm7270Match-

Node

lexmarklw80_firmwareRange<lw80.sa.p234

AND

lexmarkms911Match-

Node

lexmarklw80_firmwareRange<lw80.mg.p234

AND

lexmarkmx910Match-

lexmarkmx911Match-

lexmarkmx912Match-

lexmarkxm9145Match-

lexmarkxm9155Match-

lexmarkxm9165Match-

Node

lexmarklw80_firmwareRange<lw80.jd.p234

AND

lexmarkmx6500eMatch-

Node

lexmarklw80_firmwareRange<lw80.vyl.p234

AND

lexmarkcs310Match-

lexmarkcs317Match-

Node

lexmarklw80_firmwareRange<lw80.vy2.p234

AND

lexmarkcs410Match-

lexmarkcs417Match-

Node

lexmarklw80_firmwareRange<lw80.vy4.p234

AND

lexmarkc2132Match-

lexmarkcs510Match-

lexmarkcs517Match-

Node

lexmarklw80_firmwareRange<lw80.gm2.p234

AND

lexmarkcx310Match-

lexmarkcx317Match-

Node

lexmarklw80_firmwareRange<lw80.gm4.p234

AND

lexmarkcx410Match-

lexmarkcx417Match-

lexmarkxc2130Match-

Node

lexmarklw80_firmwareRange<lw80.gm7.p234

AND

lexmarkcx510Match-

lexmarkcx517Match-

lexmarkxc2132Match-

Node

lexmarklhs60_firmwareRange<lhs60.cm2.p760

AND

lexmarkc746Match-

Node

lexmarklhs60_firmwareRange<lhs60.cm4.p760

AND

lexmarkc748Match-

lexmarkcs748Match-

Node

lexmarklhs60_firmwareRange<lhs60.hc.p760

AND

lexmarkc792Match-

lexmarkcs796Match-

Node

lexmarklhs60_firmwareRange<lhs60.hv.p760

AND

lexmarkc925Match-

Node

lexmarklhs60_firmwareRange<lhs60.tp.p760

AND

lexmarkc950Match-

Node

lexmarklhs60_firmwareRange<lhs60.vk.p760

AND

lexmarkx548Match-

lexmarkxs548Match-

Node

lexmarklhs60_firmwareRange<lhs60.ny.p760

AND

lexmarkx746Match-

lexmarkx748Match-

lexmarkxs748Match-

Node

lexmarklhs60_firmwareRange<lhs60.mr.p760

AND

lexmarkx792Match-

lexmarkxs795Match-

lexmarkxs796Match-

lexmarkxs798Match-

Node

lexmarklhs60_firmwareRange<lhs60.hk.p760

AND

lexmarkx925Match-

lexmarkxs925Match-

Node

lexmarklhs60_firmwareRange<lhs60.tq.p760

AND

lexmarkx950Match-

lexmarkx952Match-

lexmarkx954Match-

lexmarkxs950Match-

lexmarkxs955Match-

Node

lexmarklhs60_firmwareRange<lhs60.jr.p760

AND

lexmark6500eMatch-

Node

lexmarklr_firmwareRange<lr.sk.p838

AND

lexmarkc734Match-

Node

lexmarklr_firmwareRange<lr.ske.p838

AND

lexmarkc736Match-

Node

lexmarklr_firmwareRange<lr.lbh.p838

AND

lexmarke46xMatch-

Node

lexmarklr_firmwareRange<lr.jp.p838

AND

lexmarkt65xMatch-

Node

lexmarklr_firmwareRange<lr.bs.p838

AND

lexmarkx46xMatch-

Node

lexmarklr_firmwareRange<lr.mn.p838

AND

lexmarkx65xMatch-

Node

lexmarklr_firmwareRange<lr.mn.p838

AND

lexmarkx65xMatch-

Node

lexmarklr_firmwareRange<lr.fl.p838

AND

lexmarkx73xMatch-

Node

lexmarklp_firmwareRange<lp.jb.p837

AND

lexmarkw850Match-

Node

lexmarklp_firmwareRange<lp.sp.p837

AND

lexmarkx86xMatch-

VendorProductVersionCPE
lexmarkcxtpc_firmware*cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*
lexmarkcx930-cpe:2.3:h:lexmark:cx930:-:*:*:*:*:*:*:*
lexmarkcx931-cpe:2.3:h:lexmark:cx931:-:*:*:*:*:*:*:*
lexmarkcx942-cpe:2.3:h:lexmark:cx942:-:*:*:*:*:*:*:*
lexmarkcx943-cpe:2.3:h:lexmark:cx943:-:*:*:*:*:*:*:*
lexmarkcx944-cpe:2.3:h:lexmark:cx944:-:*:*:*:*:*:*:*
lexmarkxc9325-cpe:2.3:h:lexmark:xc9325:-:*:*:*:*:*:*:*
lexmarkxc9335-cpe:2.3:h:lexmark:xc9335:-:*:*:*:*:*:*:*
lexmarkxc9445-cpe:2.3:h:lexmark:xc9445:-:*:*:*:*:*:*:*
lexmarkxc9455-cpe:2.3:h:lexmark:xc9455:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lexmark	cxtpc_firmware	*	cpe:2.3:o:lexmark:cxtpc_firmware::::::::
lexmark	cx930	-	cpe:2.3:h:lexmark:cx930:-:::::::*
lexmark	cx931	-	cpe:2.3:h:lexmark:cx931:-:::::::*
lexmark	cx942	-	cpe:2.3:h:lexmark:cx942:-:::::::*
lexmark	cx943	-	cpe:2.3:h:lexmark:cx943:-:::::::*
lexmark	cx944	-	cpe:2.3:h:lexmark:cx944:-:::::::*
lexmark	xc9325	-	cpe:2.3:h:lexmark:xc9325:-:::::::*
lexmark	xc9335	-	cpe:2.3:h:lexmark:xc9335:-:::::::*
lexmark	xc9445	-	cpe:2.3:h:lexmark:xc9445:-:::::::*
lexmark	xc9455	-	cpe:2.3:h:lexmark:xc9455:-:::::::*

Rows per page:

1-10 of 2171

References

publications.lexmark.com/publications/security-alerts/CVE-2023-26066.pdf

support.lexmark.com/alerts/

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

65.4%

JSON

Related for CVE-2023-26066