Priority MEDIUM 51
Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to remote code execution on the device.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06215 · Published 2022-01-20 · No fix listed CWE-94
Priority MEDIUM 41
PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01435 · Published 2022-01-20 · No fix listed CWE-22
Priority MEDIUM 48
Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03312 · Published 2022-01-20 · No fix listed CWE-120
Priority LOW 25
A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00658 · Published 2020-04-28 · No fix listed CWE-79
Priority LOW 25
A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 & XC2130 before LW74.GM4.P273; CX510 & XC2132 be…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00653 · Published 2020-04-28 · No fix listed CWE-79
Priority LOW 36
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01655 · Published 2020-03-10 · No fix listed CWE-22
Priority LOW 35
Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01103 · Published 2020-03-09 · No fix listed CWE-200
Priority LOW 25
Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00653 · Published 2020-03-06 · No fix listed CWE-79
Priority LOW 25
Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00658 · Published 2020-03-06 · No fix listed CWE-79
Priority LOW 25
Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00531 · Published 2020-02-13 · No fix listed CWE-79
Priority LOW 35
Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01083 · Published 2019-08-28 · No fix listed
Priority MEDIUM 45
Various Lexmark products have a Buffer Overflow (issue 3 of 3).
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01512 · Published 2019-08-28 · No fix listed CWE-119
Priority MEDIUM 45
Various Lexmark products have a Buffer Overflow (issue 2 of 3).
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01512 · Published 2019-08-28 · No fix listed CWE-119
Priority MEDIUM 45
Various Lexmark products have an Integer Overflow.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01532 · Published 2019-08-28 · No fix listed CWE-190
Priority LOW 26
The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00871 · Published 2019-08-28 · No fix listed CWE-254
Priority MEDIUM 41
Various Lexmark products have Incorrect Access Control.
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01091 · Published 2019-08-28 · No fix listed
Priority LOW 26
Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00943 · Published 2019-02-11 · No fix listed
THREATIST.IORead the docs