Priority MEDIUM 49
An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00574 · Published 2026-02-03 · Fixed in 250.210, 230.507 CWE-426
Priority MEDIUM 47
A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00681 · Published 2026-02-03 · Fixed in 250.210, 230.507 CWE-22
Priority LOW 39
An out-of-bounds read vulnerability has been identified in the Postscript interpreter in various Lexmark devices.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00574 · Published 2026-02-03 · Fixed in 250.210, 230.506 CWE-125
Priority LOW 39
A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0053 · Published 2026-02-03 · Fixed in 250.210, 230.506 CWE-843
Priority LOW 39
A heap-based buffer overflow vulnerability has been identified in the Postscript interpreter in various Lexmark devices.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0053 · Published 2026-02-03 · Fixed in 250.210, 230.506 CWE-122
Priority LOW 36
A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00332 · Published 2025-09-09 · No fix listed CWE-918
Priority LOW 39
A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00306 · Published 2025-08-19 · No fix listed CWE-862
Priority LOW 37
Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.
CVSS 3.1HIGH 8.2· Local · Low privileges · User interaction · EPSS 0.00152 · Published 2025-08-19 · Fixed in 3.0.6.0, 2.17.0.0 CWE-611
Priority LOW 38
A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.00456 · Published 2025-02-13 · No fix listed CWE-843
Priority MEDIUM 42
The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.00542 · Published 2025-02-13 · No fix listed CWE-22
Priority MEDIUM 42
A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client.
CVSS 3.1CRITICAL 9.3· Local · No auth · No interaction · EPSS 0.00252 · Published 2025-02-11 · Fixed in 3.5.0 CWE-807
Priority MEDIUM 43
A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer Lexmark devices.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00415 · Published 2025-01-21 · No fix listed CWE-20
Priority MEDIUM 41
A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00605 · Published 2025-01-17 · No fix listed CWE-122
Priority LOW 20
A new feature to prevent Firmware downgrades was recently added to some Lexmark products.
CVSS 3.1MEDIUM 4.3· Adjacent network · High privileges · No interaction · EPSS 0.00271 · Published 2025-01-17 · No fix listed CWE-1328
Priority MEDIUM 43
The SE menu contains information used by Lexmark to diagnose device errors.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.00968 · Published 2024-02-28 · No fix listed CWE-20
Priority MEDIUM 42
A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices.
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.00766 · Published 2024-02-28 · No fix listed CWE-131
Priority MEDIUM 42
A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices.
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.00766 · Published 2024-02-28 · No fix listed CWE-465
Priority MEDIUM 42
A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices.
CVSS 3.1CRITICAL 9.0· Network · No auth · No interaction · EPSS 0.00765 · Published 2024-02-28 · No fix listed CWE-121
Priority MEDIUM 40
Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0054 · Published 2023-09-01 · No fix listed CWE-611
Priority MEDIUM 43
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00708 · Published 2023-04-10 · No fix listed CWE-20
Priority MEDIUM 43
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00708 · Published 2023-04-10 · No fix listed CWE-20
Priority MEDIUM 62
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.11634 · Published 2023-04-10 · No fix listed CWE-20
Priority MEDIUM 62
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.37835 · Published 2023-04-10 · No fix listed CWE-20
Priority MEDIUM 50
Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00708 · Published 2023-04-10 · No fix listed CWE-129
Priority MEDIUM 50
Certain Lexmark devices through 2023-02-19 have an Integer Overflow.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00708 · Published 2023-04-10 · No fix listed CWE-190
Load more
THREATIST.IORead the docs