CVE-2023-50735

2024-02-2803:15:07

CWE-465

Lexmark

web.nvd.nist.gov

cve-2023-50735

heap corruption

postscript interpreter

lexmark

nvd

vulnerability

execute arbitrary code

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.4

Confidence

High

EPSS

0.001

Percentile

28.8%

JSON

A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "various",
    "vendor": "Lexmark",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]