Lexmark

Records84All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical33CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

Lexmark records in CISA KEV

No Lexmark vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cx310 Firmware 20 records MEDIUM M1140 Firmware 18 records MEDIUM M1145 Firmware 18 records MEDIUM M3150dn Firmware 18 records MEDIUM M5163dn Firmware 18 records MEDIUM Ms310 Firmware 18 records MEDIUM Ms312 Firmware 18 records MEDIUM Ms315 Firmware 18 records MEDIUM

Records

84 records

TI-2014-07170 CVE-2014-8741 · GHSA-hj63-272c-h8gw

Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark…

HIGH 81

Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspecified vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.77198 Published 2020-01-27 No fix listed CWE-22

TI-2023-09391 CVE-2023-23560 · GHSA-fj75-7hqx-qp2c

In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.

MEDIUM 64

In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.13866 Published 2023-01-23 No fix listed CWE-20

TI-2023-11301 CVE-2023-26068 · GHSA-hhph-6cw5-hfgq

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).

MEDIUM 62

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11634 Published 2023-04-10 No fix listed CWE-20

TI-2023-11300 CVE-2023-26067 · GHSA-v2qx-4m4h-cjmg

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).

MEDIUM 62

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.37835 Published 2023-04-10 No fix listed CWE-20

TI-2023-09090 CVE-2023-22960 · GHSA-j9cj-vhg7-rwqr

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency.

MEDIUM 61

Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.27971 Published 2023-01-23 No fix listed CWE-284

TI-2021-20249 CVE-2021-44735 · GHSA-m2cw-h5p2-hjpq

Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.

MEDIUM 52

Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07025 Published 2022-01-20 No fix listed CWE-77

TI-2021-20248 CVE-2021-44734 · GHSA-j6rg-mpmv-h73q

Embedded web server input sanitization vulnerability in Lexmark devices through…

MEDIUM 51

Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to remote code execution on the device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06215 Published 2022-01-20 No fix listed CWE-94

TI-2023-11299 CVE-2023-26066 · GHSA-6783-6wx3-fm82

Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.

MEDIUM 50

Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00708 Published 2023-04-10 No fix listed CWE-129

TI-2023-11298 CVE-2023-26065 · GHSA-7hpc-6gxc-8w7q

Certain Lexmark devices through 2023-02-19 have an Integer Overflow.

MEDIUM 50

Certain Lexmark devices through 2023-02-19 have an Integer Overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00708 Published 2023-04-10 No fix listed CWE-190

TI-2023-11297 CVE-2023-26064 · GHSA-vg9g-fp3v-9gx8

Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.

MEDIUM 50

Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00708 Published 2023-04-10 No fix listed CWE-787

TI-2023-11296 CVE-2023-26063 · GHSA-872w-8755-cjg5

Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.

MEDIUM 50

Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00708 Published 2023-04-10 No fix listed CWE-843

TI-2019-12539 CVE-2019-16758 · GHSA-q76p-322h-xpr7

In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can…

MEDIUM 50

In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%2F to obtain local files on the host operating system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.16765 Published 2019-11-21 No fix listed CWE-22

TI-2025-40231 CVE-2025-65078 · GHSA-596w-8h87-c3q9

Untrusted search path vulnerability in Embedded Solutions Framework

MEDIUM 49

An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00574 Published 2026-02-03 Fixed in 250.210, 230.507 CWE-426

TI-2016-03720 CVE-2016-4336 · GHSA-c74f-j2jr-56qj

Out-of-bounds write in Lexmark Perceptive Document Filters

MEDIUM 49

An exploitable out-of-bounds write exists in the Bzip2 parsing of the Lexmark Perspective Document Filters conversion functionality.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03907 Published 2017-01-06 No fix listed CWE-787

TI-2013-05143 CVE-2013-6032 · GHSA-2mpr-6qr3-q9cc

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x…

MEDIUM 49

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344,…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03271 Published 2014-02-04 No fix listed CWE-20

TI-2021-20252 CVE-2021-44738 · GHSA-vcvj-q392-hvpc

Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter.

MEDIUM 48

Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03312 Published 2022-01-20 No fix listed CWE-120

TI-2017-10043 CVE-2017-13771 · GHSA-9gqv-7c54-r6w3

Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials…

MEDIUM 48

Lexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests, which allows remote attackers to obtain sensitive information via requests to (1) cgi-…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03358 Published 2017-09-07 No fix listed CWE-522

TI-2016-01734 CVE-2016-1896 · GHSA-p46f-5x6r-rjgf

Race condition in the initialization process on Lexmark printers with firmware ATL before…

MEDIUM 48

Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03259 Published 2016-01-27 No fix listed CWE-254

TI-2025-40230 CVE-2025-65077 · GHSA-jjc7-cxqw-h32m

Relative path traversal vulnerability in Embedded Solutions Framework

MEDIUM 47

A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00681 Published 2026-02-03 Fixed in 250.210, 230.507 CWE-22

TI-2021-20250 CVE-2021-44736 · GHSA-gf53-pwvp-9h97

The initial admin account setup wizard on Lexmark devices allow unauthenticated access to…

MEDIUM 46

The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” feature.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02215 Published 2022-01-20 No fix listed CWE-287

TI-2016-05941 CVE-2016-6918 · GHSA-m3hw-79rm-2g8f

Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute…

MEDIUM 46

Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01918 Published 2020-03-09 No fix listed CWE-434

TI-2013-02666 CVE-2013-3055 · GHSA-3xrg-7jpp-ghvw

Lexmark Markvision Enterprise before 1.8 provides a diagnostic interface on TCP port…

MEDIUM 46

Lexmark Markvision Enterprise before 1.8 provides a diagnostic interface on TCP port 9789, which allows remote attackers to execute arbitrary code, change the configuration, or obtain sensitive fleet-management informati…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03742 Published 2013-04-25 No fix listed CWE-264

TI-2019-07304 CVE-2019-9933 · GHSA-7cq9-564p-27wv

Various Lexmark products have a Buffer Overflow (issue 3 of 3).

MEDIUM 45

Various Lexmark products have a Buffer Overflow (issue 3 of 3).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01512 Published 2019-08-28 No fix listed CWE-119

TI-2019-07303 CVE-2019-9932 · GHSA-cjvp-jcgq-rjgr

Various Lexmark products have a Buffer Overflow (issue 2 of 3).

MEDIUM 45

Various Lexmark products have a Buffer Overflow (issue 2 of 3).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01512 Published 2019-08-28 No fix listed CWE-119

TI-2019-07301 CVE-2019-9930 · GHSA-c4c7-qfj6-vv5r

Various Lexmark products have an Integer Overflow.

MEDIUM 45

Various Lexmark products have an Integer Overflow.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01532 Published 2019-08-28 No fix listed CWE-190

Open these records in search →

Critical	33
High	29
Medium	21
Low	1
No CVSS	0