Read the docs
TI-2023-27683 Aliases CVE-2023-50737GHSA-jg84-v5xw-8m52

An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.

Priority MEDIUM 43CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00968 62nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Lexmarkvariousvarious—No fix listedCNA
  • various VendorLexmark Affected various Fixed in — No fix listed CNA

CPE names CISA-ADP · 143

CPEVersionsRoleVendor
cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:*——Lexmark
  • cpe:2.3:o:lexmark:cxtpc_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cstpc_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:mxtct_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:mxtpm_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cxtmm_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:mslsg_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:mxlsg_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:mslbd_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:mxlbd_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:msngm_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
Show 133 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:lexmark:mstgm_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:h:lexmark:ms417:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms415:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms315:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:m3150dn:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:m1145:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:m1140\+:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms617:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms517:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms510:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms610dn:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cxnzj_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cstpp_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cstat_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cxtat_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cstmh_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cxtmh_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:msnsn_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:mstsn_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:o:lexmark:mxtsn_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:csngv_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cstgv_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:o:lexmark:cxtgv_firmware:*:*:*:*:*:*:*:*——Lexmark
cpe:2.3:h:lexmark:m3150de:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms610de:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm1145:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm1140:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx517:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx511:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx510:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx417:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx410:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:m1140:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms410:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms317:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms312:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:ms310:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xm1135:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx317:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:mx310:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:*not specified by CISA-ADP—Lexmark
  • cpe:2.3:o:lexmark:mstgm_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:mxngm_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:h:lexmark:ms417:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms415:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms315:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:m3150dn:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:m1145:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:m1140\+:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms617:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms517:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms510:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms610dn:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:o:lexmark:mxtgm_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:msngw_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:mstgw_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:mxtgw_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cslbn_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cslbl_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cxlbn_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cxlbl_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cstzj_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:csnzj_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cxtzj_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cxnzj_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cxtpp_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cstpp_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cstat_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cxtat_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cstmh_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cxtmh_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:msnsn_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:mstsn_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:h:lexmark:xc2130:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:cx417:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:o:lexmark:mxtsn_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:csngv_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cstgv_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:o:lexmark:cxtgv_firmware:*:*:*:*:*:*:*:* Versions — — ·Lexmark
  • cpe:2.3:h:lexmark:m3150de:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms610de:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm1145:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm1140:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx517:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx511:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx510:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx417:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx410:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx617:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:m5163dn:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms818:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms817:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms812dn:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms811:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms810dn:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms710:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms711:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:m5163de:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm7270:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm7263:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm7170:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm7163:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm7155:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm5270:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm5263:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm5170:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm5163:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx812:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx811:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx810:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx718:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx717:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx711:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx710:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms911:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm9165:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm9155:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm9145:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx912:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx911:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx910:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:c2132:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:cs517:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:cs510:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:cx517:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:m1140:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms410:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms317:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms312:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:ms310:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xm1135:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx317:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:mx310:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:cs317:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:cs310:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:cs417:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:cs410:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:cx317:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:cx310:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:c746:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:c792:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:c950:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xs748:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:x748:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:x746:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xs798:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xs796:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xs795:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xs955:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:xs950:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:x954:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:x952:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:x950:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark
  • cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Lexmark

Remediation

No fixed version listed by the sources yet.

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Lexmark various — lexmark.com/en_us/solutions/security/lexmark-security-advis…

    4 records Highest priority Priority MEDIUM 4 MEDIUM

    Other records, highest priority first

    • TI-2023-27682 A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.Priority MEDIUM 42
    • TI-2023-27681 A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.Priority MEDIUM 42
    • TI-2023-27680 A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.Priority MEDIUM 42
    Show all 4 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-50737
  2. 2026-10-03 Alias added: GHSA-jg84-v5xw-8m52

References

Advisory 1

  • TI-2014-07170 Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark… CVSS 3.1CRITICAL 9.8
  • TI-2023-09391 In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation. CVSS 3.1CRITICAL 9.8
  • TI-2023-11301 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4). CVSS 3.1CRITICAL 9.8
  • TI-2023-11300 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4). CVSS 3.1HIGH 8.1
  • TI-2023-09090 Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency. CVSS 3.1HIGH 7.5
  • TI-2021-20249 Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07. CVSS 3.1CRITICAL 9.8
See all 83 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences