CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-23560
Critical (9.8) in lexmark. EPSS 14% chance of exploitation in the next 30 days.
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.
Severity
- EPSS
- 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-918, CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- lexmark:b2236_firmware
- lexmark:b2338_firmware
- lexmark:b2442_firmware
- lexmark:b2546_firmware
- lexmark:b2650_firmware
- lexmark:b2865_firmware
- lexmark:b3340_firmware
- lexmark:b3442_firmware
- lexmark:c2240_firmware
- lexmark:c2325_firmware
- lexmark:c2326_firmware
- lexmark:c2425_firmware
- lexmark:c2535_firmware
- lexmark:c3224_firmware
- lexmark:c3326_firmware
- lexmark:c3426_firmware
- lexmark:c4150_firmware
- lexmark:c6160_firmware
- lexmark:c9235_firmware
- lexmark:cs331_firmware
- lexmark:cs421_firmware
- lexmark:cs431_firmware
- lexmark:cs439_firmware
- lexmark:cs521_firmware
- lexmark:cs622_firmware
- lexmark:cs720_firmware
- lexmark:cs725_firmware
- lexmark:cs727_firmware
- lexmark:cs728_firmware
- lexmark:cs820_firmware
- lexmark:cs827_firmware
- lexmark:cs921_firmware
- lexmark:cs923_firmware
- lexmark:cs927_firmware
- lexmark:cx331_firmware
- lexmark:cx421_firmware
- lexmark:cx431_firmware
- lexmark:cx522_firmware
- lexmark:cx622_firmware
- lexmark:cx625_firmware
- lexmark:cx725_firmware
- lexmark:cx727_firmware
- lexmark:cx820_firmware
- lexmark:cx825_firmware
- lexmark:cx860_firmware
- lexmark:cx920_firmware
- lexmark:cx921_firmware
- lexmark:cx922_firmware
- lexmark:cx923_firmware
- lexmark:cx924_firmware