Fixed vulnerabilities in the Lexmark Universal Printer Driver

Lexmark has fixed vulnerabilities in the Universal Printer Driver. A local malicious person with rights to install/activate new printers could install/activate, could exploit the vulnerabilities to execute arbitrary code with SYSTEM privileges. Lexmark has released updates to fix the...

CVE-2021-35449

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...

CVE-2021-35449

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...

Privilege escalation

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...

CVE-2021-35449

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing durin...

CVE-2021-35449

CVE-2021-35449 affects Lexmark Universal Print Driver (versions 2.15.1.0 and earlier) and associated G2/G3/G4 drivers. The vulnerability enables local privilege escalation: a low-privilege user can cause the driver to load a DLL of their choosing during the add printer process, escalating to SYST...

Lexmark Universal Print Driver 安全漏洞

Lexmark Universal Print Driver is a printer driver from Lexmark USA. A security vulnerability exists in Lexmark Universal Print Driver that originates from a standard low-privilege user being able to use the driver to execute a DLL of their choice during the add printer process, resulting in...

Unauthorized Access Vulnerability in Lexmark XM3250

The Lexmark XM3250 is a printer from Lexmark International Inc. An unauthorized access vulnerability exists in the Lexmark XM3250, which can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Lexmark XC2235

The Lexmark XC2235 is a printer from Lexmark International Inc. An unauthorized access vulnerability exists in the Lexmark XC2235, which can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Lexmark MS521dn

The MS521dn is a printer from Lexmark International Inc. The Lexmark MS521dn has an unauthorized access vulnerability that can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Lexmark X463de

The X463de is a printer from Lexmark International Inc. The Lexmark X463de has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

Lexmark Driver Privilege Escalation

Various Lexmark Universal Printer drivers as listed at advisory TE953 allow low-privileged authenicated users to elevate their privileges to SYSTEM on affected Windows systems by modifying the XML file at C:\ProgramData\Universal Color Laser.gdl to replace the DLL path to unires.dll with a...

CVE-2021-35469

The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry that has an unquoted service path...

CVE-2021-35469

The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry that has an unquoted service path...

Privilege escalation

The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry that has an unquoted service path...

CVE-2021-35469

Summary: CVE-2021-35469 affects Lexmark Printer Software G2, G3, and G4 installation packages, via an unquoted service path in a registry entry that enables local privilege escalation. The vulnerability yields SYSTEM-level impact as described by sources such as Red Hat and NVD; exploitation detai...

CVE-2021-35469

The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry that has an unquoted service path...

Lexmark Printer Software 代码问题漏洞

Lexmark Printer Software is a printer driver from Lexmark USA. A security vulnerability exists in Lexmark Printer Software that originates from registry entries having unreferenced service paths, and the Lexmark Printer Software G2, G3, and G4 installers have a privileged vulnerable local upgrade...

Unauthorized Access Vulnerability in Lexmark MB2236adw

Lexmark NYSE: LXK is a U.S.-based company that develops and manufactures laser printers and is a provider of content management software, primarily for business users. An unauthorized access vulnerability exists in the Lexmark MB2236adw, which can be exploited by attackers to obtain sensitive...

Unauthorized Access Vulnerability in Lexmark B2338dw

Lexmark NYSE: LXK is a U.S.-based company that develops and manufactures laser printers and is a provider of content management software, primarily for business users. An unauthorized access vulnerability exists in Lexmark B2338dw, which can be exploited by attackers to obtain sensitive informati...