Evil-DB LogoEvil-DB
← All CVEs

CVE-2023-23560

critical · 9.8

In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.

9.8
CVSS
13.9%
EPSS (exploit prob.)
96th
EPSS percentile
2023-01-23
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-918CWE-20

Affected products

VendorProductAffected versions
lexmarkb2236_firmware< mslsg.081.234
lexmarkb2236all versions
lexmarkb2338_firmware< msngm.081.234
lexmarkb2338all versions
lexmarkb2442_firmware< msngm.081.234
lexmarkb2442all versions
lexmarkb2546_firmware< msngm.081.234
lexmarkb2546all versions
lexmarkb2650_firmware< msngm.081.234
lexmarkb2650all versions
lexmarkb2865_firmware< msngw.081.234
lexmarkb2865all versions
lexmarkb3340_firmware< mslbd.081.234
lexmarkb3340all versions
lexmarkb3442_firmware< mslbd.081.234
lexmarkb3442all versions
lexmarkc2240_firmware< cstzj.081.234
lexmarkc2240all versions
lexmarkc2325_firmware< csnzj.081.234
lexmarkc2325all versions
lexmarkc2326_firmware< cslbn.081.234
lexmarkc2326all versions
lexmarkc2425_firmware< csnzj.081.234
lexmarkc2425all versions
lexmarkc2535_firmware< csnzj.081.234
lexmarkc2535all versions
lexmarkc3224_firmware< cslbl.081.234
lexmarkc3224all versions
lexmarkc3326_firmware< cslbl.081.234
lexmarkc3326all versions
lexmarkc3426_firmware< cslbn.081.234
lexmarkc3426all versions
lexmarkc4150_firmware< cstat.081.234
lexmarkc4150all versions
lexmarkc6160_firmware< cstpp.081.234
lexmarkc6160all versions
lexmarkc9235_firmware< cstmh.081.234
lexmarkc9235all versions
lexmarkcs331_firmware< cslbl.081.234
lexmarkcs331all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-23560