High WID-SEC-2023-0628 8 CVEs

Lexmark Drucker: Mehrere Schwachstellen

Published Mar 12, 2023 · Updated Aug 10, 2023 · Revision 2 · de-DE

Vendor: Lexmark Product: Laser Printers Product: Multifunction Printer

Summary

Ein entfernter, anonymer oder authentifizierter Angreifer kann mehrere Schwachstellen in Lexmark Druckern ausnutzen, um beliebigen Programmcode auszuführen oder seine Rechte zu erweitern

Product

Lexmark ist ein Hersteller von Druckern und Druckerzubehör.

Vulnerabilities 8

Critical 9.8

CVE-2023-26063

Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.

Apr 10, 2023
Critical 9.8

CVE-2023-26064

Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.

Apr 10, 2023
Critical 9.8

CVE-2023-26065

Certain Lexmark devices through 2023-02-19 have an Integer Overflow.

Apr 10, 2023
Critical 9.8

CVE-2023-26066

Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.

Apr 10, 2023
Critical 9.8

CVE-2023-26068 Public exploit EPSS 12%

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).

Apr 10, 2023
Critical 9.8

CVE-2023-26069

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4).

Apr 10, 2023
Critical 9.8

CVE-2023-26070

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).

Apr 10, 2023
High 8.1

CVE-2023-26067 Public exploit Scanner template EPSS 38%

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).

Apr 10, 2023

Revision history

2023-08-10 #2
PoC für CVE-2023-26067 aufgenommen
2023-03-12 #1
Initiale Fassung

References

PoC CVE-2023-26067 vom 2023-08-10
https://github.com/horizon3ai/CVE-2023-26067
Lexmark Security Advisories vom 2023-03-12
https://publications.lexmark.com/publications/security-alerts/CVE-2023-26070.pdf
Lexmark Security Advisories vom 2023-03-12
https://publications.lexmark.com/publications/security-alerts/CVE-2023-26069.pdf
Lexmark Security Advisories vom 2023-03-12
https://publications.lexmark.com/publications/security-alerts/CVE-2023-26068.pdf
Lexmark Security Advisories vom 2023-03-12
https://publications.lexmark.com/publications/security-alerts/CVE-2023-26067.pdf
Lexmark Security Advisories vom 2023-03-12
https://publications.lexmark.com/publications/security-alerts/CVE-2023-26066.pdf
Lexmark Security Advisories vom 2023-03-12
https://publications.lexmark.com/publications/security-alerts/CVE-2023-26065.pdf
Lexmark Security Advisories vom 2023-03-12
https://publications.lexmark.com/publications/security-alerts/CVE-2023-26064.pdf
Lexmark Security Advisories vom 2023-03-12
https://publications.lexmark.com/publications/security-alerts/CVE-2023-26063.pdf