CVE-2022-29850

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots...

CVE-2021-35449

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...

CVE-2021-35469

The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry that has an unquoted service path...

CVE-2021-44735

Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07...

CVE-2019-16758

In Lexmark Services Monitor 2.27.4.0.39 running on TCP port 2070, a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%2F to obtain local files on the host operating system...

CVE-2019-9931

Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device...

CVE-2019-9932

Various Lexmark products have a Buffer Overflow issue 2 of 3...

CVE-2019-9935

Various Lexmark products have Incorrect Access Control issue 2 of 2...

CVE-2019-9933

Various Lexmark products have a Buffer Overflow issue 3 of 3...

CVE-2019-9930

Various Lexmark products have an Integer Overflow...

CVE-2019-19773

Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content=TE935=en=ENUS...

CVE-2019-10058

Various Lexmark products have Incorrect Access Control...

CVE-2019-10059

The legacy finger service TCP port 79 is enabled by default on various older Lexmark devices...

CVE-2018-15519

Various Lexmark devices have a Buffer Overflow issue 1 of 2...

CVE-2018-15520

Various Lexmark devices have a Buffer Overflow issue 2 of 2...

CVE-2011-4538

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings...

CVE-2011-3269

Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut...

CVE-2016-1487

Lexmark Markvision Enterprise before 2.3.0 misuses the Apache Commons Collections Library, leading to remote code execution because of Java deserialization...

CVE-2019-9934

Various Lexmark products have Incorrect Access Control issue 1 of 2...

CVE-2019-19772

Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content=TE935=en=ENUS...