Lexmark vulnerabilities | LiveThreat CVE Feed

CVE	Product	CVSS	EPSS	Published	Summary
CVE-2025-65078	CC CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG Lexmark	9.3	1%	Feb 3	Untrusted search path vulnerability in Embedded Solutions Framework
CVE-2025-65077	CC CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG Lexmark	8.8	1%	Feb 3	Relative path traversal vulnerability in Embedded Solutions Framework
CVE-2025-65081	CC CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG Lexmark	6.9	1%	Feb 3	Out-of-bounds read vulnerability in Postscript interpreter
CVE-2025-65080	CC CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG Lexmark	6.9	1%	Feb 3	Type confusion vulnerability in Postscript interpreter
CVE-2025-65079	MM MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ Lexmark	6.9	1%	Feb 3	Heap-based buffer overflow vulnerability in Postscript interpreter
CVE-2025-9269	CX CX, XC, CS, MS, MX, XM, et. al. Lexmark	6.9	0%	Sep 9	Server-Side Request Forgery (SSRF) vulnerability found in embedded web server
CVE-2025-4046	LC Lexmark Cloud Services Lexmark	8.5	0%	Aug 19	Missing Authorization in Lexmark Cloud Services badge management
CVE-2025-4044	PS Printer Software G2 Lexmark	8.2	0%	Aug 19	XML External Entity Injection vulnerability in various Lexmark Universal Drivers
CVE-2024-11344	CX CX, XC, CS, MS, MX, XM, et. al. Lexmark	7.3	0%	Feb 13	Type confusion vulnerability in the Postscript interpreter in various Lexmark devices
CVE-2025-1127	CX CX, XC, CS, MS, MX, XM, et. al. Lexmark	9.1	1%	Feb 13	Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server
CVE-2025-1126	LP Lexmark Print Management Client Lexmark	9.3	0%	Feb 11	Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC).
CVE-2023-50733	VA various Lexmark	8.6	0%	Jan 21	A Server-Side Request Forgery (SSRF) vulnerability exists in newer Lexmark devices.
CVE-2023-50739	PF Printer Firmware Lexmark	8.8	1%	Jan 17	A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.
CVE-2023-50738	PF Printer Firmware Lexmark	4.3	0%	Jan 17	A firmware downgrade prevention vulnerability has been identified in newer Lexmark devices.
CVE-2023-50737	VA various Lexmark	9.1	1%	Feb 28	An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.
CVE-2023-50736	VA various Lexmark	9.0	1%	Feb 28	A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.
CVE-2023-50735	VA various Lexmark	9.0	1%	Feb 28	A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.
CVE-2023-50734	VA various Lexmark	9.0	1%	Feb 28	A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.
CVE-2023-40239	MF M3150de Firmware Lexmark	7.5	1%	Sep 1	Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure
CVE-2023-26070	MF Mstgw Firmware Lexmark	9.8	1%	Apr 10	Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4)
CVE-2023-26069	CF Cxtpc Firmware Lexmark	9.8	1%	Apr 10	Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4)
CVE-2023-26068	CF Cxtpc Firmware Lexmark	9.8	12%	Apr 10	Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4)
CVE-2023-26067	CF Cstpc Firmware Lexmark	8.1	38%	Apr 10	Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4)
CVE-2023-26066	MF Mslsg Firmware Lexmark	9.8	1%	Apr 10	Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index
CVE-2023-26065	CF Cxtpc Firmware Lexmark	9.8	1%	Apr 10	Certain Lexmark devices through 2023-02-19 have an Integer Overflow
CVE-2023-26064	CF Cxtpc Firmware Lexmark	9.8	1%	Apr 10	Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write
CVE-2023-26063	CF Cxtpc Firmware Lexmark	9.8	1%	Apr 10	Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type
CVE-2023-23560	BF B2236 Firmware Lexmark	9.8	14%	Jan 23	In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation
CVE-2023-22960	BF B2338 Firmware Lexmark	7.5	28%	Jan 23	Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency
CVE-2022-29850	MF Mx421 Firmware Lexmark	8.1	1%	Aug 26	Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots
CVE-2022-24935	LF Lexmark Firmware Lexmark	7.5	1%	Apr 28	Lexmark products through 2022-02-10 have Incorrect Access Control
CVE-2021-44737	BF B2236 Firmware Lexmark	8.8	1%	Jan 20	PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files
CVE-2021-44736	MF Mc3224i Firmware Lexmark	9.8	2%	Jan 20	The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” feature
CVE-2021-44735	BF B2236 Firmware Lexmark	9.8	7%	Jan 20	Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07
CVE-2021-44734	BF B2236 Firmware Lexmark	9.8	6%	Jan 20	Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to remote code execution on the device
CVE-2021-44738	XF Xm1246 Firmware Lexmark	9.8	3%	Jan 20	Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter
CVE-2021-35449	GD G2 Driver Lexmark	7.8	1%	Jul 19	The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a…
CVE-2021-35469	PS Printer Software G2 Lexmark	7.8	0%	Jul 14	The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry that has an unquoted service path
CVE-2020-10094	CF Cs31x Firmware Lexmark	5.4	1%	Apr 28	A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 &…
CVE-2020-10093	MF Mx91x Firmware Lexmark	5.4	1%	Apr 28	A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products
CVE-2018-18894	MF M5163 Firmware Lexmark	7.5	2%	Mar 10	Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server
CVE-2016-1487	ME Markvision Enterprise Lexmark	8.8	3%	Mar 9	Lexmark Markvision Enterprise before 2.3.0 misuses the Apache Commons Collections Library, leading to remote code execution because of Java deserialization
CVE-2011-4538	XF X654 Firmware Lexmark	5.3	1%	Mar 9	Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings
CVE-2011-3269	XF X950 Firmware Lexmark	7.5	1%	Mar 9	Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to obtain sensitive information via a hidden email address in a Scan To Email shortcut
CVE-2016-6918	ME Markvision Enterprise Lexmark	9.8	2%	Mar 9	Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files
CVE-2019-19773	CF Cs31x Firmware Lexmark	5.4	1%	Mar 6	Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices
CVE-2019-19772	CF Cs31x Firmware Lexmark	5.4	1%	Mar 6	Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices
CVE-2019-18791	CF Cx31x Firmware Lexmark	5.4	1%	Feb 13	Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server
CVE-2014-8742	ME Markvision Enterprise Lexmark	7.5	4%	Jan 27	Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified…
CVE-2014-8741	ME Markvision Enterprise Lexmark	9.8	77%	Jan 27	Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via…
CVE-2019-16758	SM Services Monitor Firmware Lexmark	7.5	17%	Nov 21	In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%2F to obtain local…
CVE-2019-9933	CF Cs31x Firmware Lexmark	9.8	2%	Aug 28	Various Lexmark products have a Buffer Overflow (issue 3 of 3)
CVE-2019-9932	CF Cs31x Firmware Lexmark	9.8	2%	Aug 28	Various Lexmark products have a Buffer Overflow (issue 2 of 3)
CVE-2019-9931	CF Cs31x Firmware Lexmark	7.5	1%	Aug 28	Various Lexmark printers contain a denial of service vulnerability in the SNMP service that can be exploited to crash the device
CVE-2019-9930	MF Mx511 Firmware Lexmark	9.8	2%	Aug 28	Various Lexmark products have an Integer Overflow
CVE-2019-10059	CF Cs31x Firmware Lexmark	5.3	1%	Aug 28	The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices
CVE-2019-10057	CF Cs31x Firmware Lexmark	6.5	0%	Aug 28	Various Lexmark products have CSRF
CVE-2019-9935	CF Cs31x Firmware Lexmark	5.3	1%	Aug 28	Various Lexmark products have Incorrect Access Control (issue 2 of 2)
CVE-2019-9934	CF Cs31x Firmware Lexmark	5.3	1%	Aug 28	Various Lexmark products have Incorrect Access Control (issue 1 of 2)
CVE-2019-10058	CF Cs31x Firmware Lexmark	9.1	1%	Aug 28	Various Lexmark products have Incorrect Access Control