Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Lexmark CX, XC, CS, MS, MX, XM, et. al.
through CXTLS.240.205; through MXTLS.240.205; through CSTLS.240.205; through MSNSN.240.205; through MSTSN.240.205; through MXTSN.240.205; through CSNGV.240.205; through CSTGV.240.205; through CXTGV.240.205; through CXTPC.240.205; through CSTPC.240.205; through MXTCT.240.205; through MXTPM.240.205; through CXTMM.240.205; through CSTMM.240.205; through MSNGM.240.205; through MSTGM.240.205; through MXNGM.240.205; through MXTGM.240.205; through MSNGW.240.205; through MSTGW.240.205; through MXTGW.240.205; through CSTZJ.240.205; through CSNZJ.240.205; through CXTZJ.240.205; through CXNZJ.240.205; through MSLSG.240.407; through MXLSG.240.407; through MSLBD.240.407; through MXLBD.240.407; through CSLBN.240.407; through CSLBL.240.407; through CXLBN.240.407; through CXLBL.240.407; through CXTPP.240.407; through CSTPP.240.407; through CSTAT.240.407; through CXTAT.240.407; through CSTMH.240.407; through CXTMH.240.407