Browse CVEs

HIGH 7.5 CVE-2023-40239 Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80.*.… C2132 Firmware Mitigation only Fix from $1,9502023-09-01 CRITICAL 9.8 CVE-2023-26063 Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type. Cxtpc Firmware No fix yet Fix from $2,3002023-04-10 CRITICAL 9.8 CVE-2023-26064 Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write. Cxtpc Firmware No fix yet Fix from $2,3002023-04-10 CRITICAL 9.8 CVE-2023-26065 Certain Lexmark devices through 2023-02-19 have an Integer Overflow. Cxtpc Firmware No fix yet Fix from $2,3002023-04-10 CRITICAL 9.8 CVE-2023-26066 Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index. Cxtpc Firmware Mitigation only Fix from $2,3002023-04-10 CRITICAL 9.8 CVE-2023-26068EPSS 12% Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4). Cxtpc Firmware No fix yet Fix from $2,3002023-04-10 CRITICAL 9.8 CVE-2023-26069 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4). Cxtpc Firmware No fix yet Fix from $2,3002023-04-10 CRITICAL 9.8 CVE-2023-26070 Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4). Cxtpc Firmware No fix yet Fix from $2,3002023-04-10 HIGH 8.1 CVE-2023-26067EPSS 38% Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4). Cxtpc Firmware No fix yet Fix from $1,9502023-04-10 CRITICAL 9.8 CVE-2023-23560EPSS 14% In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation. B2236 Firmware No fix yet Fix from $2,3002023-01-23 HIGH 7.5 CVE-2023-22960EPSS 28% Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency. B2236 Firmware No fix yet Fix from $1,9502023-01-23 HIGH 8.1 CVE-2022-29850 Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across r… B2236 Firmware Mitigation only Fix from $1,9502022-08-26 CRITICAL 9.8 CVE-2021-44734EPSS 6% Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to remote code execution on the … B2236 Firmware No fix yet Fix from $2,3002022-01-20 CRITICAL 9.8 CVE-2021-44735EPSS 7% Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07. B2236 Firmware Mitigation only Fix from $2,3002022-01-20 CRITICAL 9.8 CVE-2021-44736 The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” feature. Mc3224i Firmware Mitigation only Fix from $2,3002022-01-20 HIGH 8.8 CVE-2021-44737 PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files. B2236 Firmware Mitigation only Fix from $1,9502022-01-20 CRITICAL 9.8 CVE-2021-44738 Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter. B2236 Firmware No fix yet Fix from $2,3002022-01-20 MEDIUM 5.4 CVE-2020-10094 A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 befor… Cs31x Firmware Mitigation only Fix from $1,6002020-04-28 MEDIUM 5.4 CVE-2020-10093 A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products. Cs31x Firmware No fix yet Fix from $1,6002020-04-28 HIGH 7.5 CVE-2018-18894 Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server. 6500e Firmware Mitigation only Fix from $1,9502020-03-10 HIGH 7.5 CVE-2011-3269 Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Sca… X950 Firmware Mitigation only Fix from $1,9502020-03-09 MEDIUM 5.3 CVE-2011-4538 Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings. X860 Firmware Mitigation only Fix from $1,6002020-03-09 MEDIUM 5.4 CVE-2019-19772 Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in h… Cs31x Firmware Mitigation only Fix from $1,6002020-03-06 MEDIUM 5.4 CVE-2019-19773 Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http… Cs31x Firmware Mitigation only Fix from $1,6002020-03-06 MEDIUM 5.4 CVE-2019-18791 Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can… Cx31x Firmware Mitigation only Fix from $1,6002020-02-13 HIGH 7.5 CVE-2019-16758EPSS 17% In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../../ or ..%… Services Monitor Firmware No fix yet Fix from $1,9502019-11-21 CRITICAL 9.8 CVE-2019-9930 Various Lexmark products have an Integer Overflow. Cs31x Firmware No fix yet Fix from $2,3002019-08-28 CRITICAL 9.8 CVE-2019-9932 Various Lexmark products have a Buffer Overflow (issue 2 of 3). Cs31x Firmware No fix yet Fix from $2,3002019-08-28 CRITICAL 9.8 CVE-2019-9933 Various Lexmark products have a Buffer Overflow (issue 3 of 3). Cs31x Firmware No fix yet Fix from $2,3002019-08-28 HIGH 7.5 CVE-2019-9931 Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device. Cs31x Firmware No fix yet Fix from $1,9502019-08-28