Race Condition Vulnerability in Lexmark Printers by Lexmark
CVE-2016-1896

9.8CRITICAL

Key Information:

Vendor

Lexmark

Status
Printer Firmware
Vendor
CVE Published:
27 January 2016

What is CVE-2016-1896?

A race condition vulnerability exists in the initialization process of Lexmark printers, specifically in firmware versions ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049. This vulnerability allows remote attackers to exploit incorrect detection of the security-jumper status, leading to an authentication bypass. By taking advantage of this flaw, unauthorized users can gain access to the printer's functionalities without proper authentication, posing significant security risks.

References

http://support.lexmark.com/index?page=content&id=TE745
x_refsource_CONFIRM

EPSS Score

9% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.