CVE-2021-44735

Critical

Description

Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.

SeverityCritical
CVSS9.8
Exploit probability—
ProductLexmark B2236 Firmware
PublishedJan 20, 2022
First seenJan 20, 2022

How to fix

Update
  • lexmark b2236_firmwaremslsg.076.294 or later
  • lexmark mb2236_firmwaremxlsg.076.294 or later
  • lexmark ms431_firmwaremslbd.076.294 or later
  • lexmark ms331_firmwaremslbd.076.294 or later
  • lexmark m1342_firmwaremslbd.076.294 or later
  • lexmark b3442_firmwaremslbd.076.294 or later
  • lexmark b3340_firmwaremslbd.076.294 or later
  • lexmark xm1342_firmwaremslbd.076.294 or later
  • lexmark mx331_firmwaremxlbd.076.294 or later
  • lexmark mx431_firmwaremxlbd.076.294 or later
  • lexmark mb3442_firmwaremxlbd.076.294 or later
  • lexmark ms321_firmwaremsngm.076.294 or later

Affected products

ProductAffected versionsFixed in
lexmark b2236_firmwarev < mslsg.076.294mslsg.076.294
lexmark mb2236_firmwarev < mxlsg.076.294mxlsg.076.294
lexmark ms431_firmwarev < mslbd.076.294mslbd.076.294
lexmark ms331_firmwarev < mslbd.076.294mslbd.076.294
lexmark m1342_firmwarev < mslbd.076.294mslbd.076.294
lexmark b3442_firmwarev < mslbd.076.294mslbd.076.294
lexmark b3340_firmwarev < mslbd.076.294mslbd.076.294
lexmark xm1342_firmwarev < mslbd.076.294mslbd.076.294
lexmark mx331_firmwarev < mxlbd.076.294mxlbd.076.294
lexmark mx431_firmwarev < mxlbd.076.294mxlbd.076.294
lexmark mb3442_firmwarev < mxlbd.076.294mxlbd.076.294
lexmark ms321_firmwarev < msngm.076.294msngm.076.294
lexmark ms421_firmwarev < msngm.076.294msngm.076.294
lexmark ms521_firmwarev < msngm.076.294msngm.076.294
lexmark ms621_firmwarev < msngm.076.294msngm.076.294
lexmark m1242_firmwarev < msngm.076.294msngm.076.294
lexmark m1246_firmwarev < msngm.076.294msngm.076.294
lexmark b2338_firmwarev < msngm.076.294msngm.076.294
lexmark b2442_firmwarev < msngm.076.294msngm.076.294
lexmark b2546_firmwarev < msngm.076.294msngm.076.294
lexmark b2650_firmwarev < msngm.076.294msngm.076.294
lexmark ms622_firmwarev < mstgm.076.294mstgm.076.294
lexmark m3250_firmwarev < mstgm.076.294mstgm.076.294
lexmark mx321_firmwarev < mxngm.076.294mxngm.076.294
lexmark mb2338_firmwarev < mxngm.076.294mxngm.076.294
lexmark mx421_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark mx521_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark mx522_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark mx622_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark xm1242_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark xm1246_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark xm3250_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark mb2442_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark mb2546_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark mb2650_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark ms821_firmwarev < msngw.076.294msngw.076.294
lexmark ms823_firmwarev < msngw.076.294msngw.076.294
lexmark ms825_firmwarev < msngw.076.294msngw.076.294
lexmark b2865_firmwarev < msngw.076.294msngw.076.294
lexmark ms725_firmwarev < msngw.076.294msngw.076.294
lexmark ms822_firmwarev < mstgw.076.294mstgw.076.294
lexmark ms826_firmwarev < mstgw.076.294mstgw.076.294
lexmark m5255_firmwarev < mstgw.076.294mstgw.076.294
lexmark m5270_firmwarev < mstgw.076.294mstgw.076.294
lexmark mx722_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark mx822_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark mx826_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark xm5365_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark xm7355_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark xm7370_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark mb2770_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark mx721_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark c3426_firmwarev < cslbn.076.294cslbn.076.294
lexmark c2326_firmwarev < cslbn.076.294cslbn.076.294
lexmark cs431_firmwarev < cslbn.076.294cslbn.076.294
lexmark cs439_firmwarev < cslbn.076.294cslbn.076.294
lexmark cs331_firmwarev < cslbl.076.294cslbl.076.294
lexmark c3224_firmwarev < cslbl.076.294cslbl.076.294
lexmark c3326_firmwarev < cslbl.076.294cslbl.076.294
lexmark mc3426_firmwarev < cxlbn.076.294cxlbn.076.294
lexmark cx431_firmwarev < cxlbn.076.294cxlbn.076.294
lexmark xc2326_firmwarev < cxlbn.076.294cxlbn.076.294
lexmark mc3224_firmwarev < cxlbl.076.294cxlbl.076.294
lexmark mc3326_firmwarev < cxlbl.076.294cxlbl.076.294
lexmark cx331_firmwarev < cxlbl.076.294cxlbl.076.294
lexmark cs622_firmwarev < cstzj.076.294cstzj.076.294
lexmark c2240_firmwarev < cstzj.076.294cstzj.076.294
lexmark cs421_firmwarev < csnzj.076.294csnzj.076.294
lexmark cs521_firmwarev < csnzj.076.294csnzj.076.294
lexmark c2325_firmwarev < csnzj.076.294csnzj.076.294
lexmark c2425_firmwarev < csnzj.076.294csnzj.076.294
lexmark c2535_firmwarev < csnzj.076.294csnzj.076.294
lexmark cx522_firmwarev < cxtzj.076.294cxtzj.076.294
lexmark cx622_firmwarev < cxtzj.076.294cxtzj.076.294
lexmark cx625_firmwarev < cxtzj.076.294cxtzj.076.294
lexmark xc2235_firmwarev < cxtzj.076.294cxtzj.076.294
lexmark xc4240_firmwarev < cxtzj.076.294cxtzj.076.294
lexmark mc2535_firmwarev < cxtzj.076.294cxtzj.076.294
lexmark mc2640_firmwarev < cxtzj.076.294cxtzj.076.294
lexmark cx421_firmwarev < cxnzj.076.294cxnzj.076.294
lexmark mc2325_firmwarev < cxnzj.076.294cxnzj.076.294
lexmark mc2425_firmwarev < cxnzj.076.294cxnzj.076.294
lexmark cx820_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark cx825_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark cs827_firmwarev < cxtpp.076.294, v < cstpp.076.294cxtpp.076.294, cstpp.076.294
lexmark cx860_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark xc6152_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark xc6153_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark xc8155_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark xc8160_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark xc8163_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark cs820_firmwarev < cstpp.076.294cstpp.076.294
lexmark c6160_firmwarev < cstpp.076.294cstpp.076.294
lexmark cs720_firmwarev < cstat.076.294cstat.076.294
lexmark cs725_firmwarev < cstat.076.294cstat.076.294
lexmark cs727_firmwarev < cstat.076.294cstat.076.294
lexmark cs728_firmwarev < cstat.076.294cstat.076.294
lexmark c4150_firmwarev < cstat.076.294cstat.076.294
lexmark cx725_firmwarev < cxtat.076.294cxtat.076.294
lexmark cx727_firmwarev < cxtat.076.294cxtat.076.294
lexmark xc4140_firmwarev < cxtat.076.294cxtat.076.294
lexmark xc4143_firmwarev < cxtat.076.294cxtat.076.294
lexmark xc4150_firmwarev < cxtat.076.294cxtat.076.294
lexmark xc4153_firmwarev < cxtat.076.294cxtat.076.294
lexmark cs921_firmwarev < cstmh.076.294cstmh.076.294
lexmark cs923_firmwarev < cstmh.076.294cstmh.076.294
lexmark cs927_firmwarev < cstmh.076.294cstmh.076.294
lexmark c9235_firmwarev < cstmh.076.294cstmh.076.294
lexmark cx920_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark cx921_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark cx922_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark cx923_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark cx924_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark xc9225_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark xc9235_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark xc9245_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark xc9255_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark xc9265_firmwarev < cxtmh.076.294cxtmh.076.294

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.