PJL Directory Traversal Vulnerability in Lexmark Devices
CVE-2021-44737

8.8HIGH

Key Information:

Vendor
Lexmark
Status
B2236 Firmware
Vendor
CVE Published:
20 January 2022

Summary

Lexmark devices are susceptible to a PJL directory traversal vulnerability that allows an attacker to access sensitive internal configuration files. By exploiting this vulnerability, attackers can potentially overwrite crucial system settings, leading to unauthorized control over the device's operations. Users are urged to review security guidelines and firmware updates to mitigate potential risks.

References

https://support.lexmark.com/alerts/
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-22-333/
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.