947 matches found
Lexmark 安全漏洞
Lexmark is a series of printers in the U.S. Lexmark is vulnerable to a buffer overflow vulnerability that exists due to a boundary error when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system...
Lexmark 命令注入漏洞
Lexmark is a series of printers in the U.S. A command injection vulnerability exists in Lexmark, which stems from the failure of a network system or product to properly filter special characters, commands, etc. during the execution of commands entered by a user into the construct. An attacker cou...
Lexmark 代码注入漏洞
Lexmark is a series of printers in the U.S. A security vulnerability exists in Lexmark, which stems from a network system or product that does not properly filter special elements in code segments constructed from external input data. An attacker could exploit the vulnerability to generate an...
PT-2022-12213 · Lexmark · Lexmark Devices
Name of the Vulnerable Software and Affected Versions: Lexmark devices affected versions not specified Description: The issue is related to an embedded web server command injection vulnerability. This vulnerability was identified in Lexmark devices through 2021-12-07. There is no information...
partner.lexmark.com Open Redirect vulnerability OBB-2147916
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Metasploit Wrap-Up
Print Driver PrivEsc If you attended DEF CON last week, you may have seen this talk on print driver vulnerabilities from Metasploit community contributor Jacob Baines. In the spirit of Friday the 13th, we're highlighting some of these "print nightmares" again, in the form of two new Metasploit...
Lexmark Driver Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Lexmark Driver Privilege Escalation', 'Description' = %q Various Lexmark Universal Printer drivers as listed at advisory TE953 allow low-privileg...
Fixed vulnerabilities in the Lexmark Universal Printer Driver
Lexmark has fixed vulnerabilities in the Universal Printer Driver. A local malicious person with rights to install/activate new printers could install/activate, could exploit the vulnerabilities to execute arbitrary code with SYSTEM privileges. Lexmark has released updates to fix the...
CVE-2021-35449
The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...
CVE-2021-35449
The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...
Privilege escalation
The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...
CVE-2021-35449
The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...
CVE-2021-35449
CVE-2021-35449 affects Lexmark Universal Print Driver (versions 2.15.1.0 and earlier) and associated G2/G3/G4 drivers. The vulnerability enables local privilege escalation: a low-privilege user can cause the driver to load a DLL of their choosing during the add printer process, escalating to SYST...
Lexmark Universal Print Driver 安全漏洞
Lexmark Universal Print Driver is a printer driver from Lexmark USA. A security vulnerability exists in Lexmark Universal Print Driver that originates from a standard low-privilege user being able to use the driver to execute a DLL of their choice during the add printer process, resulting in...
Unauthorized Access Vulnerability in Lexmark XM3250
The Lexmark XM3250 is a printer from Lexmark International Inc. An unauthorized access vulnerability exists in the Lexmark XM3250, which can be exploited by an attacker to obtain sensitive information...
Unauthorized Access Vulnerability in Lexmark XC2235
The Lexmark XC2235 is a printer from Lexmark International Inc. An unauthorized access vulnerability exists in the Lexmark XC2235, which can be exploited by an attacker to obtain sensitive information...
Unauthorized Access Vulnerability in Lexmark MS521dn
The MS521dn is a printer from Lexmark International Inc. The Lexmark MS521dn has an unauthorized access vulnerability that can be exploited by an attacker to obtain sensitive information...
Unauthorized Access Vulnerability in Lexmark X463de
The X463de is a printer from Lexmark International Inc. The Lexmark X463de has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...
Lexmark Driver Privilege Escalation
Various Lexmark Universal Printer drivers as listed at advisory TE953 allow low-privileged authenicated users to elevate their privileges to SYSTEM on affected Windows systems by modifying the XML file at C:\ProgramData\Universal Color Laser.gdl to replace the DLL path to unires.dll with a...