CVE-2016-1896

9.8 criticalEPSS 3.3%

Critical (9.8) in lexmark printer firmware. EPSS 3.3% chance of exploitation in the next 30 days.

Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-11-01)
CWEs: CWE-254, CWE-264
Published: 2016-01-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lexmark:printer_firmware

References

http://support.lexmark.com/index?page=content&id=TE745
http://support.lexmark.com/index?page=content&id=TE745

Check your stack JSON