Skip to content
OpenAdvisories
High WID-SEC-2025-0375 6 CVEs

Lexmark Laser Printers: Mehrere Schwachstellen

Published Feb 13, 2025 · Updated Feb 13, 2025 · de-DE

Vendor: Lexmark Product: Laser Printers Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Lexmark Laserdruckern und dem Print Management Client ausnutzen, um beliebigen Code auszuführen und Sicherheitsmaßnahmen zu umgehen.

Product

Lexmark ist ein Hersteller von Druckern und Druckerzubehör.

Vulnerabilities 6

  • Critical 9.3
    CVE-2025-1126

    Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC).

    A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client.

    Lexmark Lexmark Print Management Client
  • High 7.3
    CVE-2024-11344

    Type confusion vulnerability in the Postscript interpreter in various Lexmark devices

    A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

    Lexmark CX, XC, CS, MS, MX, XM, et. al.
  • High 7.3
    CVE-2024-11345

    Heap-based memory vulnerability in the Postscript interpreter in various Lexmark devices

    A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

    Lexmark International CX, XC, CS, MS, MX, XM, et. al.
  • High 7.3
    CVE-2024-11346

    Access of Resource Using Incompatible Type in Postscript interpreter

    : Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from …

    Lexmark International CX, XC, CS, MS, MX, XM, et. al.
  • High 7.3
    CVE-2024-11347

    Access of Resource Using Incompatible Type in Postscript interpreter

    Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

    Lexmark International CX, XC, CS, et. al.
  • Medium 5.3
    CVE-2024-11348

    Reflected XSS in Eura7 CMSmanager

    Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint. The vulnerability has been fixed by a patche patch 17012022 addressing all affected versions in …

    Eura7 CMSmanager

Revision history

  1. #1

    Initiale Fassung

References