Priority MEDIUM 51
Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to remote code execution on the device.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06215 · Published 2022-01-20 · No fix listed CWE-94
Priority MEDIUM 48
Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03312 · Published 2022-01-20 · No fix listed CWE-120
Priority MEDIUM 45
Various Lexmark products have a Buffer Overflow (issue 3 of 3).
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01512 · Published 2019-08-28 · No fix listed CWE-119
Priority MEDIUM 45
Various Lexmark products have a Buffer Overflow (issue 2 of 3).
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01512 · Published 2019-08-28 · No fix listed CWE-119
Priority MEDIUM 45
Various Lexmark products have an Integer Overflow.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01532 · Published 2019-08-28 · No fix listed CWE-190
Priority MEDIUM 41
PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01435 · Published 2022-01-20 · No fix listed CWE-22
Priority MEDIUM 41
Various Lexmark products have Incorrect Access Control.
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01091 · Published 2019-08-28 · No fix listed
Priority MEDIUM 40
Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0054 · Published 2023-09-01 · No fix listed CWE-611
Priority LOW 35
Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01083 · Published 2019-08-28 · No fix listed
Priority LOW 29
Various Lexmark products have CSRF.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00407 · Published 2019-08-28 · No fix listed CWE-352
Priority LOW 26
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00871 · Published 2019-08-28 · No fix listed CWE-254
Priority LOW 26
Various Lexmark products have Incorrect Access Control (issue 2 of 2).
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00825 · Published 2019-08-28 · No fix listed CWE-306
Priority LOW 26
Various Lexmark products have Incorrect Access Control (issue 1 of 2).
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00832 · Published 2019-08-28 · No fix listed CWE-306
Priority LOW 25
A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 & XC2130 before LW74.GM4.P273; CX510 & XC2132 be…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00653 · Published 2020-04-28 · No fix listed CWE-79
Priority LOW 25
A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00658 · Published 2020-04-28 · No fix listed CWE-79
Priority LOW 25
Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00658 · Published 2020-03-06 · No fix listed CWE-79
Priority LOW 25
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00653 · Published 2020-03-06 · No fix listed CWE-79
Priority LOW 25
Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00531 · Published 2020-02-13 · No fix listed CWE-79
THREATIST.IORead the docs