947 matches found
CVE-2023-26065
Certain Lexmark devices through 2023-02-19 have an Integer Overflow...
CVE-2023-26067
Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 1 of 4...
CVE-2023-26070
The CVE-2023-26070 issue affects Lexmark printers and Multifunction devices, arising from improper input validation in the SNMP feature. This vulnerability can allow an attacker to execute arbitrary code remotely on vulnerable devices. Affected products are Lexmark printers with firmware up to th...
CVE-2023-26064
Summary: CVE-2023-26064 affects Lexmark devices with a PostScript interpreter, where an out-of-bounds write flaw can lead to arbitrary code execution. The connected Nessus/NVL and Red Hat/NCSC entries confirm this vulnerability in Lexmark printers and indicate exploitation could be remote and hig...
CVE-2023-26065
CVE-2023-26065 affects Lexmark printers/devices with a vulnerable PostScript interpreter. Multiple connected sources confirm an integer overflow in this component, enabling a remote attacker to potentially execute arbitrary code with high impact (confidentiality/ integrity/ availability). The vul...
CVE-2023-26063
CVE-2023-26063 concerns Lexmark printers/multifunction devices with a vulnerability in the PostScript interpreter that enables a type confusion flaw in resource handling. Reported impact in connected sources: remote code execution by a remote attacker, via the affected Lexmark devices up to 2023-...
PT-2023-20462
Name of the Vulnerable Software and Affected Versions Lexmark devices through 2023-02-19 Description The issue is related to mishandling Input Validation. A proof of concept PoC has been published for a critical vulnerability in Lexmark printers, which allows for privilege escalation. There have...
Lexmark Printer Input Validation Vulnerability (CVE-2023-26070)
Multiple Lexmark printer devices are prone to an input validation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...
Lexmark Printer Input Validation Vulnerability (CVE-2023-26069)
Multiple Lexmark printer devices are prone to an input validation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...
Lexmark Printer Multiple Postscript Interpreter Vulnerabilities (Mar 2023)
Multiple Lexmark printer devices are prone to multiple vulnerabilities in the Postscript interpreter. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Lexmark Printer Multiple Input Validation Vulnerabilities (Mar 2023)
Multiple Lexmark printer devices are prone to multiple input validation vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Lexmark Device Embedded Web Server RCE
A unauthenticated Remote Code Execution vulnerability exists in the embedded webserver in certain Lexmark devices through 2023-02-19. The vulnerability is only exposed if, when setting up the printer or device, the user selects "Set up Later" when asked if they would like to add an Admin user. If...
Vulnerabilities fixed in Lexmark Printers and Multifunctionals
Lexmark has fixed several vulnerabilities in the firmware of their printers and multifunction devices. A remote malicious person could exploit the vulnerabilities to execute arbitrary code in the context of the printer's vulnerable interface, or to appropriate elevated privileges after previous...
SUSE CVE-2017-13771
Lexmark Scan To Network SNF 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to 1 cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or 2...
The vulnerability of the web service for Lexmark printer devices allows a perpetrator to execute arbitrary codes.
The vulnerability of the New Lexmark Device printers’ web service is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Lexmark Printer SSRF Vulnerability (Jan 2023)
Multiple Lexmark printer devices are prone to a server-side request forgery SSRF vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Lexmark Printer Brute-Force Protection Bypass Vulnerability (Jan 2023)
Multiple Lexmark printer devices are prone to a brute-force protection bypass vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...
Exploit for Improper Access Control in Lexmark B2236_Firmware
PoC for CVE-2023-22960 !Pythonhttps://img.shields.io/badg...
Vulnerabilities fixed in Lexmark Printers and Multifunctionals
Lexmark has fixed two vulnerabilities in the firmware of several printer and multifunction lines. A malicious party could exploit the vulnerabilities to grant himself elevated privileges granted on the vulnerable device, or to execute arbitrary code execute. The mitigation against brute-force log...
