var-202201-1301
Vulnerability from variot
PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files. plural Lexmark The device contains a path traversal vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability.The specific flaw exists within the handling of PJL commands. The issue results from an exposed danagerous function, which can allow the creation of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of root. Lexmark is a line of printers in the United States.
A path traversal vulnerability exists in Lexmark devices that stems from the product's failure to properly filter special elements in resource or file paths
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-202201-1301", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "c2240", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cstzj.076.294" }, { "model": "mx718", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "m5155", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.dn4.p210" }, { "model": "mx810", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "c950", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.tp.p753" }, { "model": "xm7170", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "ms911", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sa.p210" }, { "model": "ms810dn", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.dn2.p210" }, { "model": "xs955", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.tq.p753" }, { "model": "mx722", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgw.076.294" }, { "model": "mx410", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sb4.p210" }, { "model": "ms610dn", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.pr2.p210" }, { "model": "b2650", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngm.076.294" }, { "model": "xc4150", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtat.076.294" }, { "model": "ms812de", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.dn7.p210" }, { "model": "cx622", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtzj.076.294" }, { "model": "b2236", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mslsg.076.294" }, { "model": "b3340", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mslbd.076.294" }, { "model": "cx727", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtat.076.294" }, { "model": "cs331", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cslbl.076.294" }, { "model": "cx510", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.gm7.p210" }, { "model": "cs431", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cslbn.076.294" }, { "model": "mb2442", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgm.076.294" }, { "model": "mb2236", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxlsg.076.294" }, { "model": "b2442", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngm.076.294" }, { "model": "b2865", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngw.076.294" }, { "model": "cx331", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxlbl.076.294" }, { "model": "cx860", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtpp.076.294" }, { "model": "xc9265", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtmh.076.294" }, { "model": "xm3150", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sb7.p210" }, { "model": "m5163dn", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.dn2.p210" }, { "model": "cs720", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cstat.076.294" }, { "model": "xc2326", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxlbn.076.294" }, { "model": "mx811", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "m5255", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mstgw.076.294" }, { "model": "mb2338", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxngm.076.294" }, { "model": "xc4143", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtat.076.294" }, { "model": "cx417", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.gm4.p210" }, { "model": "xm3250", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgm.076.294" }, { "model": "cx421", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxnzj.076.294" }, { "model": "mc2325", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxnzj.076.294" }, { "model": "b2546", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngm.076.294" }, { "model": "mc2535", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtzj.076.294" }, { "model": "cs923", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cstmh.076.294" }, { "model": "c734", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lr.sk.p835" }, { "model": "e46x", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lr.lbh.p835" }, { "model": "mx431", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxlbd.076.294" }, { "model": "ms825", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngw.076.294" }, { "model": "cx825", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtpp.076.294" }, { "model": "cx431", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxlbn.076.294" }, { "model": "ms517", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.pr2.p210" }, { "model": "cs410", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.vy2.p210" }, { "model": "xc2132", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.gm7.p210" }, { "model": "ms711", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.dn2.p210" }, { "model": "mx622", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgm.076.294" }, { "model": "xs950", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.tq.p753" }, { "model": "mx717", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "cs748", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.cm4.p753" }, { "model": "cs820", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cstpp.076.294" }, { "model": "cx920", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtmh.076.294" }, { "model": "cs517", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.vy4.p210" }, { "model": "mc2425", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxnzj.076.294" }, { "model": "c3426", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cslbn.076.294" }, { "model": "mb2650", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgm.076.294" }, { "model": "ms810de", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.dn4.p210" }, { "model": "xm9155", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.mg.p210" }, { "model": "x954", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.tq.p753" }, { "model": "xm5365", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgw.076.294" }, { "model": "cx923", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtmh.076.294" }, { "model": "m3150de", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.pr4.p210" }, { "model": "c792", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.hc.p753" }, { "model": "m1140", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.prl.p210" }, { "model": "mx421", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgm.076.294" }, { "model": "c2325", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "csnzj.076.294" }, { "model": "xm5170", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "mx6500e", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.jd.p210" }, { "model": "xm1140", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sb4.p210" }, { "model": "m1140\\+", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.pr2.p210" }, { "model": "mx822", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgw.076.294" }, { "model": "ms823", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngw.076.294" }, { "model": "xc2130", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.gm4.p210" }, { "model": "ms431", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mslbd.076.294" }, { "model": "m1342", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mslbd.076.294" }, { "model": "cx317", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.gm2.p210" }, { "model": "x746", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.ny.p753" }, { "model": "c746", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.cm2.p753" }, { "model": "mb2770", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgw.076.294" }, { "model": "xm1242", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgm.076.294" }, { "model": "m1246", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngm.076.294" }, { "model": "ms410", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.prl.p210" }, { "model": "mx521", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgm.076.294" }, { "model": "ms315", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tl2.p210" }, { "model": "m3150dn", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.pr2.p210" }, { "model": "ms811", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.dn2.p210" }, { "model": "xm9145", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.mg.p210" }, { "model": "xm1246", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgm.076.294" }, { "model": "xm7370", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgw.076.294" }, { "model": "cx725", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtat.076.294" }, { "model": "cs417", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.vy2.p210" }, { "model": "x952", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.tq.p753" }, { "model": "xc2235", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtzj.076.294" }, { "model": "xm5263", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "xm9165", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.mg.p210" }, { "model": "ms610de", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.pr4.p210" }, { "model": "xs795", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.mr.p753" }, { "model": "6500e", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.jr.p753" }, { "model": "mx317", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sb2.p210" }, { "model": "cx522", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtzj.076.294" }, { "model": "mx911", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.mg.p210" }, { "model": "cx625", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtzj.076.294" }, { "model": "mx611", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sb7.p210" }, { "model": "xm7355", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgw.076.294" }, { "model": "cs310", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.vyl.p210" }, { "model": "xm7270", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "mx610", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sb7.p210" }, { "model": "xs925", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.hk.p753" }, { "model": "c9235", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cstmh.076.294" }, { "model": "c6160", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cstpp.076.294" }, { "model": "cx820", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtpp.076.294" }, { "model": "ms417", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tl2.p210" }, { "model": "m5270", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mstgw.076.294" }, { "model": "mx710", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "c2132", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.vy4.p210" }, { "model": "ms317", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.prl.p210" }, { "model": "mx310", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sb2.p210" }, { "model": "ms521", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngm.076.294" }, { "model": "xc6153", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtpp.076.294" }, { "model": "m5170", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.dn7.p210" }, { "model": "ms817", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.dn2.p210" }, { "model": "xs796", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.mr.p753" }, { "model": "xc9225", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtmh.076.294" }, { "model": "c4150", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cstat.076.294" }, { "model": "cs622", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cstzj.076.294" }, { "model": "c3326", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cslbl.076.294" }, { "model": "xm1342", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mslbd.076.294" }, { "model": "xc9245", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtmh.076.294" }, { "model": "xs548", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.vk.p753" }, { "model": "c748", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.cm4.p753" }, { "model": "xs798", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.mr.p753" }, { "model": "m1242", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngm.076.294" }, { "model": "m5163de", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.dn4.p210" }, { "model": "w850", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lp.jb.p834" }, { "model": "cs727", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cstat.076.294" }, { "model": "c925", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.hv.p753" }, { "model": "xc8160", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtpp.076.294" }, { "model": "x748", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.ny.p753" }, { "model": "mb2546", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgm.076.294" }, { "model": "ms621", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngm.076.294" }, { "model": "cx924", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtmh.076.294" }, { "model": "xc8163", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtpp.076.294" }, { "model": "ms818", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.dn2.p210" }, { "model": "b2338", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngm.076.294" }, { "model": "mx910", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.mg.p210" }, { "model": "cx410", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.gm4.p210" }, { "model": "xc4140", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtat.076.294" }, { "model": "x65x", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lr.mn.p835" }, { "model": "mc3426", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxlbn.076.294" }, { "model": "cs725", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cstat.076.294" }, { "model": "cs317", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.vyl.p210" }, { "model": "cx310", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.gm2.p210" }, { "model": "ms710", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.dn2.p210" }, { "model": "ms321", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngm.076.294" }, { "model": "cs796", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.hc.p753" }, { "model": "ms826", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mstgw.076.294" }, { "model": "xc6152", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtpp.076.294" }, { "model": "ms510", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.pr2.p210" }, { "model": "m3250", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mstgm.076.294" }, { "model": "cs728", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cstat.076.294" }, { "model": "mx517", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sb4.p210" }, { "model": "m1145", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.pr2.p210" }, { "model": "cs439", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cslbn.076.294" }, { "model": "mc3224", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxlbl.076.294" }, { "model": "mx511", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sb4.p210" }, { "model": "cs827", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cstpp.076.294" }, { "model": "ms822", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mstgw.076.294" }, { "model": "cx922", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtmh.076.294" }, { "model": "xc9235", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtmh.076.294" }, { "model": "c2535", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "csnzj.076.294" }, { "model": "x73x", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lr.fl.p835" }, { "model": "c736", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lr.ske.p835" }, { "model": "ms421", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngm.076.294" }, { "model": "xm7155", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "x950", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.tq.p753" }, { "model": "ms725", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngw.076.294" }, { "model": "cs827", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtpp.076.294" }, { "model": "cs521", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "csnzj.076.294" }, { "model": "xc9255", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtmh.076.294" }, { "model": "mx617", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sb7.p210" }, { "model": "ms812dn", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.dn2.p210" }, { "model": "ms821", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "msngw.076.294" }, { "model": "mx522", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgm.076.294" }, { "model": "cs927", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cstmh.076.294" }, { "model": "mx711", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "x46x", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lr.bs.p835" }, { "model": "ms331", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mslbd.076.294" }, { "model": "xc8155", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtpp.076.294" }, { "model": "cs921", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cstmh.076.294" }, { "model": "mx812", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "ms622", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mstgm.076.294" }, { "model": "xc4153", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtat.076.294" }, { "model": "mx510", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sb4.p210" }, { "model": "xm7263", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "cx921", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtmh.076.294" }, { "model": "cs510", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.vy4.p210" }, { "model": "xm5270", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "xm5163", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "mc3326", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxlbl.076.294" }, { "model": "xm1135", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sb2.p210" }, { "model": "mx331", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxlbd.076.294" }, { "model": "ms312", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.prl.p210" }, { "model": "mx417", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sb4.p210" }, { "model": "mx321", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxngm.076.294" }, { "model": "x792", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.mr.p753" }, { "model": "x86x", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lp.sp.p834" }, { "model": "cx517", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.gm7.p210" }, { "model": "ms310", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.prl.p210" }, { "model": "c3224", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cslbl.076.294" }, { "model": "xs748", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.ny.p753" }, { "model": "mx912", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.mg.p210" }, { "model": "ms617", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.pr2.p210" }, { "model": "x548", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.vk.p753" }, { "model": "mb3442", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxlbd.076.294" }, { "model": "mx721", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgw.076.294" }, { "model": "x925", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lhs60.hk.p753" }, { "model": "xm1145", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.sb4.p210" }, { "model": "c2326", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cslbn.076.294" }, { "model": "t65x", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lr.jp.p835" }, { "model": "mc2640", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtzj.076.294" }, { "model": "ms415", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tl2.p210" }, { "model": "b3442", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mslbd.076.294" }, { "model": "xc4240", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "cxtzj.076.294" }, { "model": "mx826", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "mxtgw.076.294" }, { "model": "cs421", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "csnzj.076.294" }, { "model": "xm7163", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "lw80.tu.p210" }, { "model": "c2425", "scope": "lt", "trust": 1.0, "vendor": "lexmark", "version": "csnzj.076.294" }, { "model": "b2236", "scope": null, "trust": 0.8, "vendor": "lexmark", "version": null }, { "model": "mx431", "scope": null, "trust": 0.8, "vendor": "lexmark", "version": null }, { "model": "mb2236", "scope": null, "trust": 0.8, "vendor": "lexmark", "version": null }, { "model": "xm1342", "scope": null, "trust": 0.8, "vendor": "lexmark", "version": null }, { "model": "mx331", "scope": null, "trust": 0.8, "vendor": "lexmark", "version": null }, { "model": "ms331", "scope": null, "trust": 0.8, "vendor": "lexmark", "version": null }, { "model": "ms431", "scope": null, "trust": 0.8, "vendor": "lexmark", "version": null }, { "model": "b3340", "scope": null, "trust": 0.8, "vendor": "lexmark", "version": null }, { "model": "b3442", "scope": null, "trust": 0.8, "vendor": "lexmark", "version": null }, { "model": "m1342", "scope": null, "trust": 0.8, "vendor": "lexmark", "version": null }, { "model": "mc3224i", "scope": null, "trust": 0.7, "vendor": "lexmark", "version": null }, { "model": "lexmark", "scope": null, "trust": 0.6, "vendor": "lexmark", "version": null } ], "sources": [ { "db": "ZDI", "id": "ZDI-22-333" }, { "db": "CNVD", "id": "CNVD-2022-08185" }, { "db": "JVNDB", "id": "JVNDB-2022-003882" }, { "db": "NVD", "id": "CVE-2021-44737" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "NCC Group EDG (Alex Plaskett, Cedric Halbronn, Aaron Adams)", "sources": [ { "db": "ZDI", "id": "ZDI-22-333" } ], "trust": 0.7 }, "cve": "CVE-2021-44737", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "COMPLETE", "baseScore": 8.3, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 6.5, "id": "CVE-2021-44737", "impactScore": 10.0, "integrityImpact": "COMPLETE", "severity": "HIGH", "trust": 1.8, "vectorString": "AV:A/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "CNVD-2022-08185", "impactScore": 2.9, "integrityImpact": "PARTIAL", "severity": "MEDIUM", "trust": 0.6, "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "ADJACENT", "author": "nvd@nist.gov", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "exploitabilityScore": 2.8, "id": "CVE-2021-44737", "impactScore": 5.9, "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, { "attackComplexity": "Low", "attackVector": "Adjacent Network", "author": "NVD", "availabilityImpact": "High", "baseScore": 8.8, "baseSeverity": "High", "confidentialityImpact": "High", "exploitabilityScore": null, "id": "CVE-2021-44737", "impactScore": null, "integrityImpact": "High", "privilegesRequired": "None", "scope": "Unchanged", "trust": 0.8, "userInteraction": "None", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, { "attackComplexity": "LOW", "attackVector": "ADJACENT", "author": "ZDI", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "exploitabilityScore": 2.8, "id": "CVE-2021-44737", "impactScore": 5.9, "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 0.7, "userInteraction": "NONE", "vectorString": "AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } ], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2021-44737", "trust": 1.0, "value": "HIGH" }, { "author": "NVD", "id": "CVE-2021-44737", "trust": 0.8, "value": "High" }, { "author": "ZDI", "id": "CVE-2021-44737", "trust": 0.7, "value": "HIGH" }, { "author": "CNVD", "id": "CNVD-2022-08185", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-202201-1808", "trust": 0.6, "value": "HIGH" } ] } ], "sources": [ { "db": "ZDI", "id": "ZDI-22-333" }, { "db": "CNVD", "id": "CNVD-2022-08185" }, { "db": "JVNDB", "id": "JVNDB-2022-003882" }, { "db": "CNNVD", "id": "CNNVD-202201-1808" }, { "db": "NVD", "id": "CVE-2021-44737" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files. plural Lexmark The device contains a path traversal vulnerability.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark MC3224i printers. Authentication is not required to exploit this vulnerability.The specific flaw exists within the handling of PJL commands. The issue results from an exposed danagerous function, which can allow the creation of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of root. Lexmark is a line of printers in the United States. \n\r\n\r\nA path traversal vulnerability exists in Lexmark devices that stems from the product\u0027s failure to properly filter special elements in resource or file paths", "sources": [ { "db": "NVD", "id": "CVE-2021-44737" }, { "db": "JVNDB", "id": "JVNDB-2022-003882" }, { "db": "ZDI", "id": "ZDI-22-333" }, { "db": "CNVD", "id": "CNVD-2022-08185" } ], "trust": 2.79 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2021-44737", "trust": 4.5 }, { "db": "ZDI", "id": "ZDI-22-333", "trust": 3.1 }, { "db": "JVNDB", "id": "JVNDB-2022-003882", "trust": 0.8 }, { "db": "ZDI_CAN", "id": "ZDI-CAN-15820", "trust": 0.7 }, { "db": "CNVD", "id": "CNVD-2022-08185", "trust": 0.6 }, { "db": "CNNVD", "id": "CNNVD-202201-1808", "trust": 0.6 } ], "sources": [ { "db": "ZDI", "id": "ZDI-22-333" }, { "db": "CNVD", "id": "CNVD-2022-08185" }, { "db": "JVNDB", "id": "JVNDB-2022-003882" }, { "db": "CNNVD", "id": "CNNVD-202201-1808" }, { "db": "NVD", "id": "CVE-2021-44737" } ] }, "id": "VAR-202201-1301", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2022-08185" } ], "trust": 1.2324346511111113 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "IoT" ], "sub_category": null, "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2022-08185" } ] }, "last_update_date": "2024-11-23T21:33:17.116000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "Lexmark\u00a0Security\u00a0Advisories", "trust": 0.8, "url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html" }, { "title": "Lexmark has issued an update to correct this vulnerability.", "trust": 0.7, "url": "https://publications.lexmark.com/publications/security-alerts/CVE-2021-44737.pdf" }, { "title": "Patch for Lexmark Path Traversal Vulnerability", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchInfo/show/317101" }, { "title": "Lexmark Repair measures for path traversal vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=179837" } ], "sources": [ { "db": "ZDI", "id": "ZDI-22-333" }, { "db": "CNVD", "id": "CNVD-2022-08185" }, { "db": "JVNDB", "id": "JVNDB-2022-003882" }, { "db": "CNNVD", "id": "CNNVD-202201-1808" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-22", "trust": 1.0 }, { "problemtype": "Path traversal (CWE-22) [NVD evaluation ]", "trust": 0.8 } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2022-003882" }, { "db": "NVD", "id": "CVE-2021-44737" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 3.0, "url": "https://www.zerodayinitiative.com/advisories/zdi-22-333/" }, { "trust": 2.0, "url": "https://nvd.nist.gov/vuln/detail/cve-2021-44737" }, { "trust": 1.6, "url": "https://support.lexmark.com/alerts/" }, { "trust": 0.7, "url": "https://publications.lexmark.com/publications/security-alerts/cve-2021-44737.pdf" } ], "sources": [ { "db": "ZDI", "id": "ZDI-22-333" }, { "db": "CNVD", "id": "CNVD-2022-08185" }, { "db": "JVNDB", "id": "JVNDB-2022-003882" }, { "db": "CNNVD", "id": "CNNVD-202201-1808" }, { "db": "NVD", "id": "CVE-2021-44737" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "ZDI", "id": "ZDI-22-333" }, { "db": "CNVD", "id": "CNVD-2022-08185" }, { "db": "JVNDB", "id": "JVNDB-2022-003882" }, { "db": "CNNVD", "id": "CNNVD-202201-1808" }, { "db": "NVD", "id": "CVE-2021-44737" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2022-02-15T00:00:00", "db": "ZDI", "id": "ZDI-22-333" }, { "date": "2022-02-02T00:00:00", "db": "CNVD", "id": "CNVD-2022-08185" }, { "date": "2023-03-10T00:00:00", "db": "JVNDB", "id": "JVNDB-2022-003882" }, { "date": "2022-01-20T00:00:00", "db": "CNNVD", "id": "CNNVD-202201-1808" }, { "date": "2022-01-20T17:15:17.967000", "db": "NVD", "id": "CVE-2021-44737" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2022-02-15T00:00:00", "db": "ZDI", "id": "ZDI-22-333" }, { "date": "2022-02-02T00:00:00", "db": "CNVD", "id": "CNVD-2022-08185" }, { "date": "2023-03-10T03:18:00", "db": "JVNDB", "id": "JVNDB-2022-003882" }, { "date": "2022-03-18T00:00:00", "db": "CNNVD", "id": "CNNVD-202201-1808" }, { "date": "2024-11-21T06:31:29.553000", "db": "NVD", "id": "CVE-2021-44737" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote or local", "sources": [ { "db": "CNNVD", "id": "CNNVD-202201-1808" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Lexmark Path Traversal Vulnerability", "sources": [ { "db": "CNVD", "id": "CNVD-2022-08185" }, { "db": "CNNVD", "id": "CNNVD-202201-1808" } ], "trust": 1.2 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "path traversal", "sources": [ { "db": "CNNVD", "id": "CNNVD-202201-1808" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.