CVE-2023-50736

2024-02-2803:15:07

CWE-131

Lexmark

web.nvd.nist.gov

cve-2023-50736

memory corruption

postscript interpreter

lexmark devices

arbitrary code execution

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

28.8%

JSON

A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "various",
    "vendor": "Lexmark",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]