Skip to content
OpenAdvisories
Critical · 9.1 CVE-2025-1127 EUVD-2025-2017GHSA-2qmv-6vxr-xhwg

Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server

Published Feb 13, 2025 · Updated Feb 13, 2025 · Assigned by Lexmark

Description

The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.

Affected products

VendorProductAffectedFixed
Lexmark CX, XC, CS, MS, MX, XM, et. al. ≤ CXTLS.240.205, ≤ MXTLS.240.205, ≤ CSTLS.240.205, ≤ MSNSN.240.205, ≤ MSTSN.240.205, ≤ MXTSN.240.205, ≤ CSNGV.240.205, ≤ CSTGV.240.205, ≤ CXTGV.240.205, ≤ CXTPC.240.205, ≤ CSTPC.240.205, ≤ MXTCT.240.205, ≤ MXTPM.240.205, ≤ CXTMM.240.205, ≤ CSTMM.240.205, ≤ MSNGM.240.205, ≤ MSTGM.240.205, ≤ MXNGM.24… —

Advisories 1

References