Filtered by vendor Lexmark Subscriptions
Total 72 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2013-3055 1 Lexmark 1 Markvision 2025-04-11 N/A
Lexmark Markvision Enterprise before 1.8 provides a diagnostic interface on TCP port 9789, which allows remote attackers to execute arbitrary code, change the configuration, or obtain sensitive fleet-management information via unspecified vectors.
CVE-2013-6033 1 Lexmark 9 C52x, C53x, C920 and 6 more 2025-04-11 N/A
Multiple cross-site scripting (XSS) vulnerabilities on Lexmark W840 through LS.HA.P252, T64x before LS.ST.P344, C935dn through LC.JO.P091, C920 through LS.TA.P152, C53x through LS.SW.P069, C52x through LS.FA.P150, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allow remote authenticated users to inject arbitrary web script or HTML by using (1) SNMP or (2) the Embedded Web Server (EWS) to set the (a) Contact or (b) Location field.
CVE-2013-6032 1 Lexmark 23 25xxn, C52x, C53x and 20 more 2025-04-11 N/A
cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P152, C78x through LC.IO.P187, X78x through LC2.IO.P335, C77x through LC.CM.P052, X772 through LC2.TR.P291, C53x through LS.SW.P069, C52x through LS.FA.P150, 25xxN through LCL.CU.P114, N4000 through LC.MD.P119, N4050e through GO.GO.N206, N70xxe through LC.CO.N309, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allows remote attackers to remove the Password Protect administrative password via the vac.255.GENPASSWORD parameter.
CVE-2006-0592 1 Lexmark 1 Printer Sharing 2025-04-03 N/A
Unspecified vulnerability in the Lexmark Printer Sharing LexBce Server Service (LexPPS), possibly 8.29 and 9.41, allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information is based on a vague initial disclosure; details will be updated after the grace period has ended.
CVE-2004-0740 1 Lexmark 1 T522 Network Printer 2025-04-03 N/A
The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a denial of service (server crash, reload, or hang) via an HTTP header with a long Host field, possibly triggering a buffer overflow.
CVE-2001-0044 1 Lexmark 1 Markvision 2025-04-03 N/A
Multiple buffer overflows in Lexmark MarkVision printer driver programs allows local users to gain privileges via long arguments to the cat_network, cat_paraller, and cat_serial commands.
CVE-2006-0577 1 Lexmark 1 X1185 2025-04-03 N/A
Lexmark X1185 printer allows local users to gain SYSTEM privileges by navigating to the "Appearance" dialog and selecting the "Additional styles (skins) are available on the Lexmark web site" option, which launches a web browser that is running with SYSTEM privileges.
CVE-2023-23560 1 Lexmark 256 B2236, B2236 Firmware, B2338 and 253 more 2025-04-02 9.8 Critical
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.
CVE-2023-22960 1 Lexmark 256 B2236, B2236 Firmware, B2338 and 253 more 2025-04-02 7.5 High
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency.
CVE-2023-26070 1 Lexmark 217 6500e, B2236, B2338 and 214 more 2025-02-11 9.8 Critical
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).
CVE-2023-26069 1 Lexmark 152 B2236, B2338, B2442 and 149 more 2025-02-11 9.8 Critical
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4).
CVE-2023-26067 1 Lexmark 163 B2236, B2338, B2442 and 160 more 2025-02-11 8.1 High
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).
CVE-2023-26066 1 Lexmark 217 6500e, B2236, B2338 and 214 more 2025-02-11 9.8 Critical
Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.
CVE-2023-26065 1 Lexmark 217 6500e, B2236, B2338 and 214 more 2025-02-11 9.8 Critical
Certain Lexmark devices through 2023-02-19 have an Integer Overflow.
CVE-2023-26064 1 Lexmark 217 6500e, B2236, B2338 and 214 more 2025-02-11 9.8 Critical
Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.
CVE-2023-26063 1 Lexmark 217 6500e, B2236, B2338 and 214 more 2025-02-11 9.8 Critical
Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.
CVE-2023-40239 1 Lexmark 164 C2132, C2132 Firmware, Cs310 and 161 more 2024-11-21 7.5 High
Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80.*.P246, i.e., '*' indicates that the full version specification varies across product model family, but firmware level P246 (or higher) is required to remediate the vulnerability.
CVE-2022-29850 1 Lexmark 234 B2236, B2236 Firmware, B2338 and 231 more 2024-11-21 8.1 High
Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots.
CVE-2022-24935 1 Lexmark 2 Lexmark, Lexmark Firmware 2024-11-21 7.5 High
Lexmark products through 2022-02-10 have Incorrect Access Control.
CVE-2021-44738 1 Lexmark 467 6500e, 6500e Firmware, B2236 and 464 more 2024-11-21 9.8 Critical
Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter.