940 matches found
CVE-2023-26063
CVE-2023-26063 concerns Lexmark printers/multifunction devices with a vulnerability in the PostScript interpreter that enables a type confusion flaw in resource handling. Reported impact in connected sources: remote code execution by a remote attacker, via the affected Lexmark devices up to 2023-...
Lexmark Printer Input Validation Vulnerability (CVE-2023-26069)
Multiple Lexmark printer devices are prone to an input validation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...
Lexmark Printer Input Validation Vulnerability (CVE-2023-26070)
Multiple Lexmark printer devices are prone to an input validation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...
Lexmark Printer Multiple Postscript Interpreter Vulnerabilities (Mar 2023)
Multiple Lexmark printer devices are prone to multiple vulnerabilities in the Postscript interpreter. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Lexmark Printer Multiple Input Validation Vulnerabilities (Mar 2023)
Multiple Lexmark printer devices are prone to multiple input validation vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Lexmark Device Embedded Web Server RCE
A unauthenticated Remote Code Execution vulnerability exists in the embedded webserver in certain Lexmark devices through 2023-02-19. The vulnerability is only exposed if, when setting up the printer or device, the user selects "Set up Later" when asked if they would like to add an Admin user. If...
Vulnerabilities fixed in Lexmark Printers and Multifunctionals
Lexmark has fixed several vulnerabilities in the firmware of their printers and multifunction devices. A remote malicious person could exploit the vulnerabilities to execute arbitrary code in the context of the printer's vulnerable interface, or to appropriate elevated privileges after previous...
SUSE CVE-2017-13771
Lexmark Scan To Network SNF 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to 1 cgi-bin/direct/printer/prtappauth/apps/snfDestServlet or 2...
The vulnerability of the web service for Lexmark printer devices allows a perpetrator to execute arbitrary codes.
The vulnerability of the New Lexmark Device printers’ web service is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Lexmark Printer SSRF Vulnerability (Jan 2023)
Multiple Lexmark printer devices are prone to a server-side request forgery SSRF vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Lexmark Printer Brute-Force Protection Bypass Vulnerability (Jan 2023)
Multiple Lexmark printer devices are prone to a brute-force protection bypass vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...
Exploit for Improper Access Control in Lexmark B2236_Firmware
PoC for CVE-2023-22960 !Pythonhttps://img.shields.io/badg...
Vulnerabilities fixed in Lexmark Printers and Multifunctionals
Lexmark has fixed two vulnerabilities in the firmware of several printer and multifunction lines. A malicious party could exploit the vulnerabilities to grant himself elevated privileges granted on the vulnerable device, or to execute arbitrary code execute. The mitigation against brute-force log...
CVE-2023-23560
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation...
CVE-2023-22960
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...
CVE-2023-22960
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency...
CVE-2023-23560
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation...
Input validation
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation...
