Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Lexmark Printer SSRF Vulnerability (CVE-2023-50733)

🗓️ 28 Jan 2025 00:00:00Reported by Copyright (C) 2025 Greenbone AGType 
openvas
 openvas🔗 plugins.openvas.org👁 10 Views

Lexmark Printer devices are vulnerable to SSRF, allowing remote code execution by attackers.

Related
Refs
Code
ReporterTitlePublishedViews
Family
circl
Circl		CVE-2023-50733
21 Jan 202522:15
–circl
cnnvd
CNNVD		Lexmark CX930 安全漏洞
21 Jan 202500:00
–cnnvd
cve
CVE		CVE-2023-50733
21 Jan 202522:03
–cve
cvelist
Cvelist		CVE-2023-50733 A Server-Side Request Forgery (SSRF) vulnerability exists in newer Lexmark devices.
21 Jan 202522:03
–cvelist
euvd
EUVD		EUVD-2023-55489
3 Oct 202520:07
–euvd
ncsc
NCSC		Vulnerabilities Fixed in Lexmark Multifunctionals
5 Apr 202400:00
–ncsc
nvd
NVD		CVE-2023-50733
21 Jan 202522:15
–nvd
openvas
OpenVAS		RICOH Printers Multiple Vulnerabilities (ricoh-2024-000003)
24 Jul 202400:00
–openvas
ptsecurity
Positive Technologies		PT-2025-1552 · Lexmark · Lexmark Devices
21 Jan 202500:00
–ptsecurity
redhatcve
RedhatCVE		CVE-2023-50733
9 Jan 202608:59
–redhatcve
Rows per page
# SPDX-FileCopyrightText: 2025 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE_PREFIX = "cpe:/o:lexmark:";

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.153885");
  script_version("2025-06-05T05:40:56+0000");
  script_tag(name:"last_modification", value:"2025-06-05 05:40:56 +0000 (Thu, 05 Jun 2025)");
  script_tag(name:"creation_date", value:"2025-01-28 05:09:42 +0000 (Tue, 28 Jan 2025)");
  script_tag(name:"cvss_base", value:"7.8");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:N/A:N");

  script_cve_id("CVE-2023-50733");

  script_tag(name:"qod_type", value:"remote_banner");

  script_tag(name:"solution_type", value:"VendorFix");

  script_name("Lexmark Printer SSRF Vulnerability (CVE-2023-50733)");

  script_category(ACT_GATHER_INFO);

  script_copyright("Copyright (C) 2025 Greenbone AG");
  script_family("Web application abuses");
  script_dependencies("gb_lexmark_printer_consolidation.nasl");
  script_mandatory_keys("lexmark_printer/detected");

  script_tag(name:"summary", value:"Multiple Lexmark printer devices are prone to a server-side
  request forgery (SSRF) vulnerability.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable firmware version is present on the
  target host.");

  script_tag(name:"insight", value:"A Server-Side Request Forgery (SSRF) vulnerability has been
  identified in the Web Services feature of newer Lexmark devices.");

  script_tag(name:"impact", value:"Successful exploitation of this vulnerability can lead to an
  attacker being able to remotely execute arbitrary code on a device.");

  script_tag(name:"solution", value:"See the referenced vendor advisories for a solution.");

  script_xref(name:"URL", value:"https://publications.lexmark.com/publications/security-alerts/CVE-2023-50733.pdf");

  exit(0);
}

include("host_details.inc");
include("version_func.inc");

if (!infos = get_app_port_from_cpe_prefix(cpe: CPE_PREFIX, first_cpe_only: TRUE))
  exit(0);

port = infos["port"];
cpe = infos["cpe"];

if (!version = toupper(get_app_version(cpe: cpe, port: port, nofork: TRUE)))
  exit(0);

if (cpe =~ "^cpe:/o:lexmark:cx93[01]" || cpe =~ "^cpe:/o:lexmark:cx94[234]" ||
    cpe =~ "^cpe:/o:lexmark:xc93[23]5" || cpe =~ "^cpe:/o:lexmark:xc94[56]5") {
  if (version_is_less(version: version, test_version: "CXTPC.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CXTPC.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cs943") {
  if (version_is_less(version: version, test_version: "CSTPC.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CSTPC.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:mx432" || cpe =~ "^cpe:/o:lexmark:xm3142") {
  if (version_is_less(version: version, test_version: "MXTCT.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MXTCT.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:mx931") {
  if (version_is_less(version: version, test_version: "MXTPM.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MXTPM.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cx73[057]" || cpe =~ "^cpe:/o:lexmark:xc43[45]2") {
  if (version_is_less(version: version, test_version: "CXTMM.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CXTMM.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cs73[057]" || cpe =~ "^cpe:/o:lexmark:c43[45]2") {
  if (version_is_less(version: version, test_version: "CSTMM.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CSTMM.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:b2236") {
  if (version_is_less(version: version, test_version: "MSLSG.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MSLSG.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:mb2236") {
  if (version_is_less(version: version, test_version: "MXLSG.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MXLSG.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:ms[34]31" || cpe =~ "^cpe:/o:lexmark:ms439" ||
    cpe =~ "^cpe:/o:lexmark:m1342" || cpe =~ "^cpe:/o:lexmark:b3442" ||
    cpe =~ "^cpe:/o:lexmark:b3340") {
  if (version_is_less(version: version, test_version: "MSLBD.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MSLBD.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:xm1342" || cpe =~ "^cpe:/o:lexmark:mx[34]31" ||
    cpe =~ "^cpe:/o:lexmark:mb3442") {
  if (version_is_less(version: version, test_version: "MXLBD.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MXLBD.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:ms[3456]21" || cpe =~ "^cpe:/o:lexmark:m124[26]" ||
    cpe =~ "^cpe:/o:lexmark:b2338" || cpe =~ "^cpe:/o:lexmark:b2442" ||
    cpe =~ "^cpe:/o:lexmark:b2546" || cpe =~ "^cpe:/o:lexmark:b2650") {
  if (version_is_less(version: version, test_version: "MSNGM.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MSNGM.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:ms622" || cpe =~ "^cpe:/o:lexmark:m3250") {
  if (version_is_less(version: version, test_version: "MSTGM.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MSTGM.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:mx321" || cpe =~ "^cpe:/o:lexmark:mb2338") {
  if (version_is_less(version: version, test_version: "MXNGM.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MXNGM.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:mx[45]21" || cpe =~ "^cpe:/o:lexmark:mx[56]22" ||
    cpe =~ "^cpe:/o:lexmark:xm124[26]" || cpe =~ "^cpe:/o:lexmark:xm3250" ||
    cpe =~ "^cpe:/o:lexmark:mb2442" || cpe =~ "^cpe:/o:lexmark:mb2546" ||
    cpe =~ "^cpe:/o:lexmark:mb2650") {
  if (version_is_less(version: version, test_version: "MXTGM.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MXTGM.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:ms[78]25" || cpe =~ "^cpe:/o:lexmark:ms82[13]" ||
    cpe =~ "^cpe:/o:lexmark:b2865") {
  if (version_is_less(version: version, test_version: "MSNGW.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MSNGW.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:ms82[26]" || cpe =~ "^cpe:/o:lexmark:m5255" ||
    cpe =~ "^cpe:/o:lexmark:m5270") {
  if (version_is_less(version: version, test_version: "MSTGW.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MSTGW.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:mx72[125]" || cpe =~ "^cpe:/o:lexmark:mx82[26]" ||
    cpe =~ "^cpe:/o:lexmark:xm53(65|70)" || cpe =~ "^cpe:/o:lexmark:xm73(55|70)" ||
    cpe =~ "^cpe:/o:lexmark:mb2770") {
  if (version_is_less(version: version, test_version: "MXTGW.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MXTGW.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:c3426" || cpe =~ "^cpe:/o:lexmark:cs43[19]" ||
    cpe =~ "^cpe:/o:lexmark:c2326") {
  if (version_is_less(version: version, test_version: "CSLBN.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CSLBN.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cs331" || cpe =~ "^cpe:/o:lexmark:c3224" ||
    cpe =~ "^cpe:/o:lexmark:c3326") {
  if (version_is_less(version: version, test_version: "CSLBL.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CSLBL.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:mc3426" || cpe =~ "^cpe:/o:lexmark:cx431" ||
    cpe =~ "^cpe:/o:lexmark:xc2326") {
  if (version_is_less(version: version, test_version: "CXLBN.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CXLBN.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:mc3224" || cpe =~ "^cpe:/o:lexmark:mc3326" ||
    cpe =~ "^cpe:/o:lexmark:cx331") {
  if (version_is_less(version: version, test_version: "CXLBL.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CXLBL.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cs622" || cpe =~ "^cpe:/o:lexmark:c2240") {
  if (version_is_less(version: version, test_version: "CSTZJ.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CSTZJ.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cs[45]21" || cpe =~ "^cpe:/o:lexmark:c2[34]25" ||
    cpe =~ "^cpe:/o:lexmark:c2535") {
  if (version_is_less(version: version, test_version: "CSNZJ.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CSNZJ.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cx[56]22" || cpe =~ "^cpe:/o:lexmark:cx625" ||
    cpe =~ "^cpe:/o:lexmark:xc2235" || cpe =~ "^cpe:/o:lexmark:xc4240" ||
    cpe =~ "^cpe:/o:lexmark:mc2535" || cpe =~ "^cpe:/o:lexmark:mc2640") {
  if (version_is_less(version: version, test_version: "CXTZJ.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CXTZJ.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cx421" || cpe =~ "^cpe:/o:lexmark:mc2[34]25") {
  if (version_is_less(version: version, test_version: "CXNZJ.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CXNZJ.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cx82[057]" || cpe =~ "^cpe:/o:lexmark:cx860" ||
    cpe =~ "^cpe:/o:lexmark:xc615[23]" || cpe =~ "^cpe:/o:lexmark:xc81(55|60|63)") {
  if (version_is_less(version: version, test_version: "CXTPP.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CXTPP.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cs82[07]" || cpe =~ "^cpe:/o:lexmark:c6160") {
  if (version_is_less(version: version, test_version: "CSTPP.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CSTPP.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cs72[0578]" || cpe =~ "^cpe:/o:lexmark:c4150") {
  if (version_is_less(version: version, test_version: "CSTAT.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CSTAT.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cx72[57]" || cpe =~ "^cpe:/o:lexmark:xc41(40|43|50|53)") {
  if (version_is_less(version: version, test_version: "CXTAT.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CXTAT.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cs92[137]" || cpe =~ "^cpe:/o:lexmark:c9235") {
  if (version_is_less(version: version, test_version: "CSTMH.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CSTMH.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cx92[01234]" || cpe =~ "^cpe:/o:lexmark:xc92[23456]5") {
  if (version_is_less(version: version, test_version: "CXTMH.230.212")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CXTMH.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:ms[56]31") {
  if (version_is_less(version: version, test_version: "MSNSN.222.032")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MSNSN.222.032");
    security_message(port: 0, data: report);
    exit(0);
  }

  if (version_in_range(version: version, test_version: "MSNSN.230.001", test_version2: "MSNSN.230.211")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MSNSN.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:ms632" || cpe =~ "^cpe:/o:lexmark:m3350") {
  if (version_is_less(version: version, test_version: "MSTSN.222.032")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MSTSN.222.032");
    security_message(port: 0, data: report);
    exit(0);
  }

  if (version_in_range(version: version, test_version: "MSTSN.230.001", test_version2: "MSTSN.230.211")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MSTSN.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:mx[56]32" || cpe =~ "^cpe:/o:lexmark:xm3350") {
  if (version_is_less(version: version, test_version: "MXTSN.222.032")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MXTSN.222.032");
    security_message(port: 0, data: report);
    exit(0);
  }

  if (version_in_range(version: version, test_version: "MXTSN.230.001", test_version2: "MXTSN.230.211")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "MXTSN.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cs531" || cpe =~ "^cpe:/o:lexmark:c2335") {
  if (version_is_less(version: version, test_version: "CSNGV.222.032")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CSNGV.222.032");
    security_message(port: 0, data: report);
    exit(0);
  }

  if (version_in_range(version: version, test_version: "CSNGV.230.001", test_version2: "CSNGV.230.211")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CSNGV.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cs632") {
  if (version_is_less(version: version, test_version: "CSTGV.222.032")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CSTGV.222.032");
    security_message(port: 0, data: report);
    exit(0);
  }

  if (version_in_range(version: version, test_version: "CSTGV.230.001", test_version2: "CSTGV.230.211")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CSTGV.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

if (cpe =~ "^cpe:/o:lexmark:cx532" || cpe =~ "^cpe:/o:lexmark:cx635" ||
    cpe =~ "^cpe:/o:lexmark:xc2335") {
  if (version_is_less(version: version, test_version: "CXTGV.222.032")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CXTGV.222.032");
    security_message(port: 0, data: report);
    exit(0);
  }

  if (version_in_range(version: version, test_version: "CXTGV.230.001", test_version2: "CXTGV.230.211")) {
    report = report_fixed_ver(installed_version: version, fixed_version: "CXTGV.230.212");
    security_message(port: 0, data: report);
    exit(0);
  }
}

exit(99);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
05 Jun 2025 00:00Current
8.8High risk
Vulners AI Score8.8
CVSS 3.18.6
EPSS0.00423
SSVC
cve-2023-50733lexmark devicesserver-side request forgeryremote code executionvendor advisories.
10