Input Validation Issues in Lexmark Devices Affecting Security
CVE-2023-26069

9.8CRITICAL

Key Information:

Vendor
Lexmark
Status
Cxtpc Firmware
Vendor
CVE Published:
10 April 2023

Summary

Certain Lexmark devices exhibited issues with input validation prior to February 19, 2023. This vulnerability may allow attackers to exploit insufficient validation mechanisms, potentially leading to unauthorized access and manipulation of device functions. It is crucial for users of affected Lexmark products to apply updates promptly to mitigate any associated security risks.

References

https://support.lexmark.com/alerts/
https://publications.lexmark.com/publications/security-al...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.