CVE-2021-44736

9.8 criticalEPSS 2.2%

Critical (9.8) in lexmark mc3224i firmware. EPSS 2.2% chance of exploitation in the next 30 days.

The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” feature.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2022-01-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19