// For flags

CVE-2021-35449

Lexmark Driver Privilege Escalation

Severity Score

7.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing during the add printer process, resulting in escalation of privileges to SYSTEM.

El Lexmark Universal Print Driver versión 2.15.1.0 e inferior, driver versión G2 2.7.1.0 e inferior, G3 driver versión 3.2.0.0 e inferior y G4 driver versión 4.2.1.0 e inferior están afectados por una vulnerabilidad de escalada de privilegios. Un usuario estándar poco privilegiado puede usar el controlador para ejecutar una DLL de su elección durante el proceso de adición de la impresora, resultando en una escalada de privilegios a SYSTEM

*Credits: N/A
CVSS Scores
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Local
Attack Complexity
Low
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-06-23 CVE Reserved
  • 2021-07-19 CVE Published
  • 2023-03-10 EPSS Updated
  • 2024-08-04 CVE Updated
  • 2024-08-04 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-732: Incorrect Permission Assignment for Critical Resource
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Lexmark
Search vendor "Lexmark"
 G2 Driver
Search vendor "Lexmark" for product "G2 Driver"
 <= 2.7.1.0
Search vendor "Lexmark" for product "G2 Driver" and version " <= 2.7.1.0"
-
Affected
Lexmark
Search vendor "Lexmark"
 G3 Driver
Search vendor "Lexmark" for product "G3 Driver"
 <= 3.2.0.0
Search vendor "Lexmark" for product "G3 Driver" and version " <= 3.2.0.0"
-
Affected
Lexmark
Search vendor "Lexmark"
 G4 Driver
Search vendor "Lexmark" for product "G4 Driver"
 <= 4.2.1.0
Search vendor "Lexmark" for product "G4 Driver" and version " <= 4.2.1.0"
-
Affected
Lexmark
Search vendor "Lexmark"
 Universal Print Driver
Search vendor "Lexmark" for product "Universal Print Driver"
 <= 2.15.1.0
Search vendor "Lexmark" for product "Universal Print Driver" and version " <= 2.15.1.0"
-
Affected