Lexmark products
by Lexmark
CVEs (11)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-23560 | Cri | 0.65 | 9.8 | 0.14 | Jan 23, 2023 | In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation. | ||
| CVE-2019-9933 | Cri | 0.64 | 9.8 | 0.02 | Aug 28, 2019 | Various Lexmark products have a Buffer Overflow (issue 3 of 3). | ||
| CVE-2019-9930 | Cri | 0.64 | 9.8 | 0.02 | Aug 28, 2019 | Various Lexmark products have an Integer Overflow. | ||
| CVE-2019-10058 | Cri | 0.59 | 9.1 | 0.01 | Aug 28, 2019 | Various Lexmark products have Incorrect Access Control. | ||
| CVE-2022-29850 | Hig | 0.53 | 8.1 | 0.01 | Aug 26, 2022 | Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots. | ||
| CVE-2023-22960 | Hig | 0.51 | 7.5 | 0.28 | Jan 23, 2023 | Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency. | ||
| CVE-2022-24935 | Hig | 0.49 | 7.5 | 0.01 | Apr 28, 2022 | Lexmark products through 2022-02-10 have Incorrect Access Control. | ||
| CVE-2019-10057 | Med | 0.42 | 6.5 | 0.00 | Aug 28, 2019 | Various Lexmark products have CSRF. | ||
| CVE-2020-13481 | Med | 0.40 | 6.1 | 0.00 | Feb 19, 2025 | Certain Lexmark products through 2020-05-25 allow XSS which allows an attacker to obtain session credentials and other sensitive information. | ||
| CVE-2019-9935 | Med | 0.35 | 5.3 | 0.01 | Aug 28, 2019 | Various Lexmark products have Incorrect Access Control (issue 2 of 2). | ||
| CVE-2023-50738 | Med | 0.28 | 4.3 | 0.00 | Jan 17, 2025 | A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified. |
- risk 0.65cvss 9.8epss 0.14
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.
- risk 0.64cvss 9.8epss 0.02
Various Lexmark products have a Buffer Overflow (issue 3 of 3).
- risk 0.64cvss 9.8epss 0.02
Various Lexmark products have an Integer Overflow.
- risk 0.59cvss 9.1epss 0.01
Various Lexmark products have Incorrect Access Control.
- risk 0.53cvss 8.1epss 0.01
Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots.
- risk 0.51cvss 7.5epss 0.28
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency.
- risk 0.49cvss 7.5epss 0.01
Lexmark products through 2022-02-10 have Incorrect Access Control.
- risk 0.42cvss 6.5epss 0.00
Various Lexmark products have CSRF.
- risk 0.40cvss 6.1epss 0.00
Certain Lexmark products through 2020-05-25 allow XSS which allows an attacker to obtain session credentials and other sensitive information.
- risk 0.35cvss 5.3epss 0.01
Various Lexmark products have Incorrect Access Control (issue 2 of 2).
- risk 0.28cvss 4.3epss 0.00
A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified.