Type confusion vulnerability in the Postscript interpreter in various Lexmark devices
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in CXTLS.240.077 - CXTLS.240.199, MXTLS.240.077 - MXTLS.240.199, CSTLS.240.077 - CSTLS.240.199, MSNSN.240.043 - MSNSN.240.069, MSTSN.240.043 - MSTSN.240.069, and 21 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: yes
- Technical impact: partial
Summary
A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: yes · Technical impact: partial
- Record last updated
Affected versions
- Lexmark CX, XC, CS, MS, MX, XM, et. al.
fixed in CXTLS.240.077 - CXTLS.240.199; From CXTLS.240.200; fixed in MXTLS.240.077 - MXTLS.240.199; From MXTLS.240.200; fixed in CSTLS.240.077 - CSTLS.240.199; From CSTLS.240.200; fixed in MSNSN.240.043 - MSNSN.240.069; From MSNSN.240.200; fixed in MSTSN.240.043 - MSTSN.240.069; From MSTSN.240.200; fixed in MXTSN.240.043 - MXTSN.240.069; From MXTSN.240.200; fixed in CSNGV.240.043 - CSNGV.240.069; From CSNGV.240.200; fixed in CSTGV.240.043 - CSTGV.240.069; From CSTGV.240.200; fixed in CXTGV.240.043 - CXTGV.240.069; From CXTGV.240.200; fixed in CXTPC.240.043 - CXTPC.240.069; From CXTPC.240.200; fixed in CSTPC.240.043 - CSTPC.240.069; From CSTPC.240.200; fixed in MXTCT.240.043 - MXTCT.240.069; From MXTCT.240.200; fixed in MXTPM.240.043-MXTPM.240.069; From MXTPM.240.200; fixed in CXTMM.240.043-CXTMM.240.069; From CXTMM.240.200; fixed in CSTMM.240.043 - CSTMM.240.069; From CSTMM.240.200; fixed in CSTZJ.240.043 - CSTZJ.240.069; From CSTZJ.240.200; fixed in CSNZJ.240.043 - CSNZJ.240.069; From CSNZJ.240.200; fixed in CXTZJ.240.043 - CXTZJ.240.069; From CXTZJ.240.200; fixed in CXNZJ.240.043 - CXNZJ.240.069; From CXNZJ.240.200; fixed in MSNGM.240.043 - MSNGM.240.069; From MSNGM.240.200; fixed in MSTGM.240.043 - MSTGM.240.069; From MSTGM.240.200; fixed in MXNGM.240.043 - MXNGM.240.069; From MXNGM.240.200; fixed in MXTGM.240.043 - MXTGM.240.069; From MXTGM.240.200; fixed in MSNGW.240.043 - MSNGW.240.069; From MSNGW.240.200; fixed in MSTGW.240.043 - MSTGW.240.069; From MSTGW.240.200; fixed in MXTGW.240.043 - MXTGW.240.069; From MXTGW.240.200; through MSLSG.230.401; through MXLSG.230.401; through MSLBD.230.401; through MXLBD.230.401; through CSLBN.230.401; through CSLBL.230.401; through CXLBN.230.401; through CXLBL.230.401; through CXTPP.230.401; through CSTPP.230.401; through CSTAT.230.401; through CXTAT.230.401; through CSTMH.230.401; through CXTMH.230.401; through LW90.TL2.P215; through LW90.PR2.P215; through LW90.PR4.P215; through LW90.SB4.P215; through LW90.SB7.P215; through LW90.DN2.P215; through LW90.DN4.P215; through LW90.DN7.P215; through LW90.TU.P215; through LW90.SA.P215; through LW90.MG.P215; through LW90.GM7.P215; through LW90.GM4.P215; through LW90.VY4.P215; through LW80.PRL.P257; through LW80.SB2.P257; through LW80.VYL.P257; through LW80.VY2.P257; through LW80.GM2.P257