CVE-2023-26068
critical · 9.8Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).
9.8
CVSS
11.6%
EPSS (exploit prob.)
96th
EPSS percentile
2023-04-10
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| lexmark | cxtpc_firmware | < cxtpc.081.232 |
| lexmark | cx930 | all versions |
| lexmark | cx931 | all versions |
| lexmark | cx942 | all versions |
| lexmark | cx943 | all versions |
| lexmark | cx944 | all versions |
| lexmark | xc9325 | all versions |
| lexmark | xc9335 | all versions |
| lexmark | xc9445 | all versions |
| lexmark | xc9455 | all versions |
| lexmark | xc9465 | all versions |
| lexmark | cstpc_firmware | < cstpc.081.232 |
| lexmark | cs943 | all versions |
| lexmark | mxtct_firmware | < mxtct.081.232 |
| lexmark | mx432 | all versions |
| lexmark | xm3142 | all versions |
| lexmark | mxtpm_firmware | < mxtpm.081.232 |
| lexmark | mx931 | all versions |
| lexmark | cxtmm_firmware | < cxtmm.081.232 |
| lexmark | cx730 | all versions |
| lexmark | cx735 | all versions |
| lexmark | xc4342 | all versions |
| lexmark | xc4352 | all versions |
| lexmark | mslsg_firmware | < mslsg.081.232 |
| lexmark | b2236 | all versions |
| lexmark | mxlsg_firmware | < mxlsg.081.232 |
| lexmark | mb2236 | all versions |
| lexmark | mslbd_firmware | < mslbd.081.232 |
| lexmark | b3340 | all versions |
| lexmark | b3442 | all versions |
| lexmark | m1342 | all versions |
| lexmark | ms331 | all versions |
| lexmark | ms431 | all versions |
| lexmark | ms439 | all versions |
| lexmark | mxlbd_firmware | < mxlbd.081.232 |
| lexmark | mb3442 | all versions |
| lexmark | mx331 | all versions |
| lexmark | mx431 | all versions |
| lexmark | xm1342 | all versions |
| lexmark | msngm_firmware | < msngm.081.232 |
Check a specific version with /api/v1/cve/match.
References
- http://packetstormsecurity.com/files/174763/Lexmark-Device-Embedded-Web-Server-Remote-Code-Execution.html
- https://publications.lexmark.com/publications/security-alerts/CVE-2023-26068.pdf
- https://support.lexmark.com/alerts/
- http://packetstormsecurity.com/files/174763/Lexmark-Device-Embedded-Web-Server-Remote-Code-Execution.html
- https://publications.lexmark.com/publications/security-alerts/CVE-2023-26068.pdf
- https://support.lexmark.com/alerts/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-26068