Lexmark Security Vulnerabilities

CVE-2021-44736

The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” feature.

CVE-2021-44737

PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files.

CVE-2021-44738

Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter.

CVE-2022-24935

Lexmark products through 2022-02-10 have Incorrect Access Control.

CVE-2022-29850

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots.

CVE-2023-22960

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency.

CVE-2023-23560

In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.

CVE-2023-26063

Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.

CVE-2023-26064

Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.

CVE-2023-26065

Certain Lexmark devices through 2023-02-19 have an Integer Overflow.

CVE-2023-26066

Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.

CVE-2023-26067

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).

CVE-2023-26068

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).

CVE-2023-26069

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4).

CVE-2023-26070

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).

CVE-2023-40239

Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80..P246, i.e., ' ' indicates that the full version specification varies across product model family, but firmware level P246 (or higher) is required to re...