High WID-SEC-2026-0315 2 CVEs

Lexmark Drucker: Mehrere Schwachstellen ermöglichen Codeausführung

Published Feb 4, 2026 · Updated Feb 5, 2026 · Revision 2 · de-DE

Vendor: Lexmark Product: Laser Printers Product: Multifunction Printer

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in verschiedenen Lexmark Druckern ausnutzen, um beliebigen Programmcode auszuführen.

Product

Lexmark ist ein Hersteller von Druckern und Druckerzubehör.

Vulnerabilities 2

Critical 9.3

CVE-2025-65078

Untrusted search path vulnerability in Embedded Solutions Framework

An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code.

Lexmark CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ

Feb 3, 2026
High 8.8

CVE-2025-65077

Relative path traversal vulnerability in Embedded Solutions Framework

A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG

Feb 3, 2026

Revision history

2026-02-05 #2
Referenz(en) aufgenommen: ZDI-26-063
2026-02-04 #1
Initiale Fassung

References

Lexmark Security Advisory vom 2026-02-03
https://www.lexmark.com/content/dam/support/collateral/security-alerts/CVE-2025-65077.pdf
Lexmark Security Advisory vom 2026-02-03
https://www.lexmark.com/content/dam/support/collateral/security-alerts/CVE-2025-65078.pdf