Design/Logic Flaw

2023-09-0111:15:00

PRIOn knowledge base

www.prio-n.com

lexmark

xxe attacks

information disclosure

firmware fixed version

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.3%

JSON

Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80..P246, i.e., '’ indicates that the full version specification varies across product model family, but firmware level P246 (or higher) is required to remediate the vulnerability.

CPENameOperatorVersion
c2132_firmwareeq<= lw80.vy4.p245
cs310_firmwareeq<= lw80.vyl.p245
cs317_firmwareeq<= lw80.vyl.p245
cs410_firmwareeq<= lw80.vy2.p245
cs417_firmwareeq<= lw80.vy2.p245
cs510_firmwareeq<= lw80.vy4.p245
cs517_firmwareeq<= lw80.vy4.p245
cx310_firmwareeq<= lw80.gm2.p245
cx317_firmwareeq<= lw80.gm2.p245
cx410_firmwareeq<= lw80.gm4.p245

Name	Operator	Version
c2132_firmware	eq	<= lw80.vy4.p245
cs310_firmware	eq	<= lw80.vyl.p245
cs317_firmware	eq	<= lw80.vyl.p245
cs410_firmware	eq	<= lw80.vy2.p245
cs417_firmware	eq	<= lw80.vy2.p245
cs510_firmware	eq	<= lw80.vy4.p245
cs517_firmware	eq	<= lw80.vy4.p245
cx310_firmware	eq	<= lw80.gm2.p245
cx317_firmware	eq	<= lw80.gm2.p245
cx410_firmware	eq	<= lw80.gm4.p245