CVE-2023-22960

CVE-2023-22960 : Lexmark printer firmware prior to 2023-01-10 is affected by Improper Control of Interaction Frequency, enabling bypass of login brute-force protections. Connected sources indicate exploitation involves the Embedded Web Server interface; impact is limited to authentication bypass ...

CVE-2023-23560

CVE-2023-23560 affects Lexmark printers and multifunction devices with a server-side request forgery (SSRF) flaw caused by insufficient input validation in the vulnerable web interface. Reports indicate this can lead to arbitrary code execution with system privileges on affected devices, based on...

Lexmark 代码问题漏洞

Lexmark is a line of printers in the United States. A security vulnerability exists in Lexmark products version 2023-01-12 and prior versions that stems from a lack of input validation...

CVE-2023-22960

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...

PT-2023-1216 · Lexmark · Lexmark

Name of the Vulnerable Software and Affected Versions: Lexmark products through 2023-01-12 Description: The issue is related to insufficient validation of requests on the server side of the New Lexmark Devices web service for Lexmark printers. This can allow a remote attacker to execute arbitrary...

Exploit for Server-Side Request Forgery in Lexmark B2236_Firmware

Lexmark printer stuff This repository contains all the work r...

Lexmark Printer Improper Input Validation Vulnerability (Jun 2022)

Multiple Lexmark printer devices are prone to an improper input validation vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Th...

CVE-2022-29850

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots...

CVE-2022-29850

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots...

CVE-2022-29850

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots...

Design/Logic Flaw

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots...

CVE-2022-29850

Summary: CVE-2022-29850 affects Lexmark printers/products through 2022-04-27. An attacker who has already compromised an affected Lexmark device can use improper input validation to maintain persistence across reboots. Affected component: Lexmark printer product line (unspecified models) with vul...

CVE-2022-29850

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots...

Lexmark 输入验证错误漏洞

Lexmark is a line of printers in the United States. Lexmark 2022-04-27 An input validation error vulnerability exists in some previous products, which stems from incorrect input validation and allows external control over system or configuration settings...

PT-2022-19877 · Lexmark · Lexmark

Name of the Vulnerable Software and Affected Versions: Lexmark products through 2022-04-27 Description: The issue allows an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots. It is due to improper input validation, which enables external contro...

Lexmark MC3224i Firmware Downgrade Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware upgrade feature. The issue results from the lack of...

CVE-2022-24935

Lexmark products through 2022-02-10 have Incorrect Access Control...

CVE-2022-24935

Lexmark products through 2022-02-10 have Incorrect Access Control...

CVE-2022-24935

Lexmark products through 2022-02-10 have Incorrect Access Control...

Improper access control

Lexmark products through 2022-02-10 have Incorrect Access Control...