Lexmark 输入验证错误漏洞

Lexmark is a line of printers in the United States. Lexmark 2022-04-27 An input validation error vulnerability exists in some previous products, which stems from incorrect input validation and allows external control over system or configuration settings...

PT-2022-19877 · Lexmark · Lexmark

Name of the Vulnerable Software and Affected Versions: Lexmark products through 2022-04-27 Description: The issue allows an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots. It is due to improper input validation, which enables external contro...

Lexmark MC3224i Firmware Downgrade Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware upgrade feature. The issue results from the lack of...

CVE-2022-24935

Lexmark products through 2022-02-10 have Incorrect Access Control...

CVE-2022-24935

Lexmark products through 2022-02-10 have Incorrect Access Control...

CVE-2022-24935

Lexmark products through 2022-02-10 have Incorrect Access Control...

Improper access control

Lexmark products through 2022-02-10 have Incorrect Access Control...

CVE-2022-24935

Lexmark products through 2022-02-10 have Incorrect Access Control...

CVE-2022-24935

Summary of CVE-2022-24935 with connected details: A set of sources identify Lexmark as affected by an Incorrect Access Control issue. The most concrete technical detail comes from ZDI-22-1038: for Lexmark MC3224i printers, the firmware upgrade feature lacks authentication, allowing network-adjace...

Lexmark 访问控制错误漏洞

Lexmark is a line of printers in the United States. There is a security vulnerability in Lexmark products, no information about the vulnerability is available at this time, please keep an eye on CNNVD or the manufacturer's announcement...

CVE-2022-24935: Missing Authentication for Critical Function

Lexmark products through 2022-02-10 have Incorrect Access Control...

PT-2022-16995 · Lexmark · Lexmark

Name of the Vulnerable Software and Affected Versions: Lexmark products through 2022-02-10 Description: The issue is related to Incorrect Access Control in Lexmark products. Recommendations: For Lexmark products through 2022-02-10, at the moment, there is no information about a newer version that...

Lexmark MC3224i PostScript Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of PostScript data. Crafted PostScript data can trigger a...

(Pwn2Own) Lexmark MC3224i Web Configuration File Code Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP server. The issue results from the lack of proper validation...

(Pwn2Own) Lexmark MC3224i Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

(Pwn2Own) Lexmark MC3224i setuid Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Lexmark MC3224i printers. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

(Pwn2Own) Lexmark MC3224i pagemaker Insufficient Session Expiration Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Lexmark MC3224i printers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the remote...

(Pwn2Own) Lexmark MC3224i setuid Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Lexmark MC3224i printers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

(Pwn2Own) Lexmark MC3224i PostScript Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of PostScript data. Crafted PostScript data can trigger a...

(Pwn2Own) Lexmark MC3224i PJL Exposed Dangerous Function Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of PJL commands. The issue results from an exposed...