CVSS 3.1
8.1 highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-26067
High (8.1) in lexmark. EPSS 38% chance of exploitation in the next 30 days.
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).
Severity
- EPSS
- 38% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- lexmark:cslbl_firmware
- lexmark:cslbn_firmware
- lexmark:csnzj_firmware
- lexmark:cstat_firmware
- lexmark:cstmh_firmware
- lexmark:cstpc_firmware
- lexmark:cxlbl_firmware
- lexmark:cxlbn_firmware
- lexmark:cxnzj_firmware
- lexmark:cxtat_firmware
- lexmark:cxtmm_firmware
- lexmark:cxtpc_firmware
- lexmark:cxtpp_firmware
- lexmark:cxtzj_firmware
- lexmark:mslbd_firmware
- lexmark:mslsg_firmware
- lexmark:msngm_firmware
- lexmark:msngw_firmware
- lexmark:mstgw_firmware
- lexmark:mxlbd_firmware
- lexmark:mxlsg_firmware
- lexmark:mxngm_firmware
- lexmark:mxtct_firmware
- lexmark:mxtgm_firmware
- lexmark:mxtgw_firmware
- lexmark:mxtpm_firmware
References
- http://packetstormsecurity.com/files/174763/Lexmark-Device-Embedded-Web-Server-Remote-Code-Execution.html
- https://publications.lexmark.com/publications/security-alerts/CVE-2023-26067.pdf
- https://support.lexmark.com/alerts/
- http://packetstormsecurity.com/files/174763/Lexmark-Device-Embedded-Web-Server-Remote-Code-Execution.html
- https://publications.lexmark.com/publications/security-alerts/CVE-2023-26067.pdf