CVSS: 7.8EPSS: 0%CPEs: 164EXPL: 0CVE-2023-40239
https://notcve.org/view.php?id=CVE-2023-40239
01 Sep 2023 — Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80.*.P246, i.e., '*' indicates that the full version specification varies across product model family, but firmware level P246 (or higher) is required to remediate the vulnerability. Ciertos dispositivos Lexmark (como el CS310) anteriores al 25-08-2023 permiten ataques XXE, que conducen a la divulgación de información. La versión de firmware corregida es LW80.*.P246... • https://publications.lexmark.com/publications/security-alerts/CVE-2023-40239.pdf • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 10.0EPSS: 8%CPEs: 472EXPL: 0CVE-2021-44734 – Lexmark MC3224i Web Configuration File Code Injection Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-44734
20 Jan 2022 — Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to remote code execution on the device. Una vulnerabilidad en el saneo de entradas del servidor web integrado en los dispositivos Lexmark versiones hasta 07-12-2021, que puede conllevar a una ejecución de código remota en el dispositivo This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not re... • https://support.lexmark.com/alerts • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 8.8EPSS: 0%CPEs: 472EXPL: 0CVE-2021-44737 – Lexmark MC3224i PJL Exposed Dangerous Function Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-44737
20 Jan 2022 — PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files. Una vulnerabilidad de salto de directorios PJL en dispositivos Lexmark versiones hasta 07-12-2021 que puede ser aprovechada para sobrescribir archivos de configuración internos This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability... • https://support.lexmark.com/alerts • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 10.0EPSS: 0%CPEs: 472EXPL: 0CVE-2021-44738 – Lexmark MC3224i PostScript Out-Of-Bounds Write Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-44738
20 Jan 2022 — Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter. Se ha identificado una vulnerabilidad de desbordamiento del búfer en los dispositivos Lexmark versiones hasta 07-12-2021, en el intérprete de postscript This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of P... • https://support.lexmark.com/alerts • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 5.4EPSS: 0%CPEs: 160EXPL: 0CVE-2020-10093
https://notcve.org/view.php?id=CVE-2020-10093
28 Apr 2020 — A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products. Una vulnerabilidad de tipo cross-site scripting (XSS) en la impresora inkjet de la serie Lexmark Pro910 y otros productos discontinuados. • http://support.lexmark.com/index?page=content&id=TE936 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 160EXPL: 0CVE-2020-10094
https://notcve.org/view.php?id=CVE-2020-10094
28 Apr 2020 — A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 & XC2130 before LW74.GM4.P273; CX510 & XC2132 before LW74.GM7.P273; MS310, MS312, MS317 before LW74.PRL.P273; MS410, M1140 before LW74.PRL.P273; MS315, MS415, MS417 before LW74.TL2.P273; MS51x, MS610dn, MS617 before LW74.PR2.P273; M1145, M3150dn before LW74.PR2.P273; MS610de, M3150 before LW74.PR4.P273; MS71x,M5163dn before LW74.DN2.P273;... • http://support.lexmark.com/index?page=content&id=TE936 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 160EXPL: 0CVE-2019-19772
https://notcve.org/view.php?id=CVE-2019-19772
06 Mar 2020 — Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US. Varios productos Lexmark, presentan una vulnerabilidad de tipo XSS reflejado en el servidor web incorporado que usado en dispositivos Lexmark de antigua generación. Los productos afectados están disponibles en http://support.lexmark.com/index? • http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 160EXPL: 0CVE-2019-19773
https://notcve.org/view.php?id=CVE-2019-19773
06 Mar 2020 — Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices. Affected products are available in http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US. Varios productos Lexmark, presentan una vulnerabilidad de tipo XSS almacenado en el servidor web incorporado que es usado en los dispositivos Lexmark de antigua generación. Los productos afectados están disponibles en http://support.lexmark.com/index? • http://support.lexmark.com/index?page=content&id=TE935&locale=en&userlocale=EN_US • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 160EXPL: 0CVE-2019-18791
https://notcve.org/view.php?id=CVE-2019-18791
13 Feb 2020 — Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. The vulnerability can be exploited to expose session credentials and other information via the users web browser. La impresora Lexmark MS812 y varios dispositivos Lexmark de generaciones anteriores, presentan una vulnerabilidad de tipo XSS almacenado en el servidor web incorporado. La vulnerabilidad puede ser explotada para exponer las credenciales de sesión y otra información por ... • http://support.lexmark.com/alerts • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.8EPSS: 0%CPEs: 142EXPL: 0CVE-2019-9931
https://notcve.org/view.php?id=CVE-2019-9931
28 Aug 2019 — Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device. Varias impresoras Lexmark contienen una vulnerabilidad de denegación de servicio en el servicio SNMP que se puede explotar para bloquear el dispositivo. • http://support.lexmark.com/index?page=content&id=TE919&locale=EN&userlocale=EN_US •