Threat Investigation
Request a demo

CVE-2021-44737

High

Description

PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files.

SeverityHigh
CVSS8.8
Exploit probability—
ProductLexmark B2236 Firmware
PublishedJan 20, 2022
First seenJan 20, 2022

How to fix

Update
  • lexmark b2236_firmwaremslsg.076.294 or later
  • lexmark mb2236_firmwaremxlsg.076.294 or later
  • lexmark ms431_firmwaremslbd.076.294 or later
  • lexmark ms331_firmwaremslbd.076.294 or later
  • lexmark m1342_firmwaremslbd.076.294 or later
  • lexmark b3442_firmwaremslbd.076.294 or later
  • lexmark b3340_firmwaremslbd.076.294 or later
  • lexmark xm1342_firmwaremslbd.076.294 or later
  • lexmark mx331_firmwaremxlbd.076.294 or later
  • lexmark mx431_firmwaremxlbd.076.294 or later
  • lexmark mb3442_firmwaremxlbd.076.294 or later
  • lexmark ms321_firmwaremsngm.076.294 or later

Affected products

ProductAffected versionsFixed in
lexmark b2236_firmwarev < mslsg.076.294mslsg.076.294
lexmark mb2236_firmwarev < mxlsg.076.294mxlsg.076.294
lexmark ms431_firmwarev < mslbd.076.294mslbd.076.294
lexmark ms331_firmwarev < mslbd.076.294mslbd.076.294
lexmark m1342_firmwarev < mslbd.076.294mslbd.076.294
lexmark b3442_firmwarev < mslbd.076.294mslbd.076.294
lexmark b3340_firmwarev < mslbd.076.294mslbd.076.294
lexmark xm1342_firmwarev < mslbd.076.294mslbd.076.294
lexmark mx331_firmwarev < mxlbd.076.294mxlbd.076.294
lexmark mx431_firmwarev < mxlbd.076.294mxlbd.076.294
lexmark mb3442_firmwarev < mxlbd.076.294mxlbd.076.294
lexmark ms321_firmwarev < msngm.076.294msngm.076.294
lexmark ms421_firmwarev < msngm.076.294msngm.076.294
lexmark ms521_firmwarev < msngm.076.294msngm.076.294
lexmark ms621_firmwarev < msngm.076.294msngm.076.294
lexmark m1242_firmwarev < msngm.076.294msngm.076.294
lexmark m1246_firmwarev < msngm.076.294msngm.076.294
lexmark b2338_firmwarev < msngm.076.294msngm.076.294
lexmark b2442_firmwarev < msngm.076.294msngm.076.294
lexmark b2546_firmwarev < msngm.076.294msngm.076.294
lexmark b2650_firmwarev < msngm.076.294msngm.076.294
lexmark ms622_firmwarev < mstgm.076.294mstgm.076.294
lexmark m3250_firmwarev < mstgm.076.294mstgm.076.294
lexmark mx321_firmwarev < mxngm.076.294mxngm.076.294
lexmark mb2338_firmwarev < mxngm.076.294mxngm.076.294
lexmark mx421_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark mx521_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark mx522_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark mx622_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark xm1242_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark xm1246_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark xm3250_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark mb2442_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark mb2546_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark mb2650_firmwarev < mxtgm.076.294mxtgm.076.294
lexmark ms821_firmwarev < msngw.076.294msngw.076.294
lexmark ms823_firmwarev < msngw.076.294msngw.076.294
lexmark ms825_firmwarev < msngw.076.294msngw.076.294
lexmark b2865_firmwarev < msngw.076.294msngw.076.294
lexmark ms725_firmwarev < msngw.076.294msngw.076.294
lexmark ms822_firmwarev < mstgw.076.294mstgw.076.294
lexmark ms826_firmwarev < mstgw.076.294mstgw.076.294
lexmark m5255_firmwarev < mstgw.076.294mstgw.076.294
lexmark m5270_firmwarev < mstgw.076.294mstgw.076.294
lexmark mx722_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark mx822_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark mx826_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark xm5365_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark xm7355_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark xm7370_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark mb2770_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark mx721_firmwarev < mxtgw.076.294mxtgw.076.294
lexmark c3426_firmwarev < cslbn.076.294cslbn.076.294
lexmark c2326_firmwarev < cslbn.076.294cslbn.076.294
lexmark cs431_firmwarev < cslbn.076.294cslbn.076.294
lexmark cs439_firmwarev < cslbn.076.294cslbn.076.294
lexmark cs331_firmwarev < cslbl.076.294cslbl.076.294
lexmark c3224_firmwarev < cslbl.076.294cslbl.076.294
lexmark c3326_firmwarev < cslbl.076.294cslbl.076.294
lexmark mc3426_firmwarev < cxlbn.076.294cxlbn.076.294
lexmark cx431_firmwarev < cxlbn.076.294cxlbn.076.294
lexmark xc2326_firmwarev < cxlbn.076.294cxlbn.076.294
lexmark mc3224_firmwarev < cxlbl.076.294cxlbl.076.294
lexmark mc3326_firmwarev < cxlbl.076.294cxlbl.076.294
lexmark cx331_firmwarev < cxlbl.076.294cxlbl.076.294
lexmark cs622_firmwarev < cstzj.076.294cstzj.076.294
lexmark c2240_firmwarev < cstzj.076.294cstzj.076.294
lexmark cs421_firmwarev < csnzj.076.294csnzj.076.294
lexmark cs521_firmwarev < csnzj.076.294csnzj.076.294
lexmark c2325_firmwarev < csnzj.076.294csnzj.076.294
lexmark c2425_firmwarev < csnzj.076.294csnzj.076.294
lexmark c2535_firmwarev < csnzj.076.294csnzj.076.294
lexmark cx522_firmwarev < cxtzj.076.294cxtzj.076.294
lexmark cx622_firmwarev < cxtzj.076.294cxtzj.076.294
lexmark cx625_firmwarev < cxtzj.076.294cxtzj.076.294
lexmark xc2235_firmwarev < cxtzj.076.294cxtzj.076.294
lexmark xc4240_firmwarev < cxtzj.076.294cxtzj.076.294
lexmark mc2535_firmwarev < cxtzj.076.294cxtzj.076.294
lexmark mc2640_firmwarev < cxtzj.076.294cxtzj.076.294
lexmark cx421_firmwarev < cxnzj.076.294cxnzj.076.294
lexmark mc2325_firmwarev < cxnzj.076.294cxnzj.076.294
lexmark mc2425_firmwarev < cxnzj.076.294cxnzj.076.294
lexmark cx820_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark cx825_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark cs827_firmwarev < cxtpp.076.294, v < cstpp.076.294cxtpp.076.294, cstpp.076.294
lexmark cx860_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark xc6152_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark xc6153_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark xc8155_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark xc8160_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark xc8163_firmwarev < cxtpp.076.294cxtpp.076.294
lexmark cs820_firmwarev < cstpp.076.294cstpp.076.294
lexmark c6160_firmwarev < cstpp.076.294cstpp.076.294
lexmark cs720_firmwarev < cstat.076.294cstat.076.294
lexmark cs725_firmwarev < cstat.076.294cstat.076.294
lexmark cs727_firmwarev < cstat.076.294cstat.076.294
lexmark cs728_firmwarev < cstat.076.294cstat.076.294
lexmark c4150_firmwarev < cstat.076.294cstat.076.294
lexmark cx725_firmwarev < cxtat.076.294cxtat.076.294
lexmark cx727_firmwarev < cxtat.076.294cxtat.076.294
lexmark xc4140_firmwarev < cxtat.076.294cxtat.076.294
lexmark xc4143_firmwarev < cxtat.076.294cxtat.076.294
lexmark xc4150_firmwarev < cxtat.076.294cxtat.076.294
lexmark xc4153_firmwarev < cxtat.076.294cxtat.076.294
lexmark cs921_firmwarev < cstmh.076.294cstmh.076.294
lexmark cs923_firmwarev < cstmh.076.294cstmh.076.294
lexmark cs927_firmwarev < cstmh.076.294cstmh.076.294
lexmark c9235_firmwarev < cstmh.076.294cstmh.076.294
lexmark cx920_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark cx921_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark cx922_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark cx923_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark cx924_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark xc9225_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark xc9235_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark xc9245_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark xc9255_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark xc9265_firmwarev < cxtmh.076.294cxtmh.076.294
lexmark ms310_firmwarev < lw80.prl.p210lw80.prl.p210
lexmark ms312_firmwarev < lw80.prl.p210lw80.prl.p210
lexmark ms317_firmwarev < lw80.prl.p210lw80.prl.p210
lexmark ms410_firmwarev < lw80.prl.p210lw80.prl.p210
lexmark m1140_firmwarev < lw80.prl.p210lw80.prl.p210
lexmark ms315_firmwarev < lw80.tl2.p210lw80.tl2.p210
lexmark ms415_firmwarev < lw80.tl2.p210lw80.tl2.p210
lexmark ms417_firmwarev < lw80.tl2.p210lw80.tl2.p210
lexmark ms510_firmwarev < lw80.pr2.p210lw80.pr2.p210
lexmark ms517_firmwarev < lw80.pr2.p210lw80.pr2.p210
lexmark ms617_firmwarev < lw80.pr2.p210lw80.pr2.p210
lexmark ms610dn_firmwarev < lw80.pr2.p210lw80.pr2.p210
lexmark m1140\+_firmwarev < lw80.pr2.p210lw80.pr2.p210
lexmark m1145_firmwarev < lw80.pr2.p210lw80.pr2.p210
lexmark m3150dn_firmwarev < lw80.pr2.p210lw80.pr2.p210
lexmark ms610de_firmwarev < lw80.pr4.p210lw80.pr4.p210
lexmark m3150de_firmwarev < lw80.pr4.p210lw80.pr4.p210
lexmark mx310_firmwarev < lw80.sb2.p210lw80.sb2.p210
lexmark mx317_firmwarev < lw80.sb2.p210lw80.sb2.p210
lexmark xm1135_firmwarev < lw80.sb2.p210lw80.sb2.p210
lexmark mx410_firmwarev < lw80.sb4.p210lw80.sb4.p210
lexmark mx417_firmwarev < lw80.sb4.p210lw80.sb4.p210
lexmark mx510_firmwarev < lw80.sb4.p210lw80.sb4.p210
lexmark mx511_firmwarev < lw80.sb4.p210lw80.sb4.p210
lexmark mx517_firmwarev < lw80.sb4.p210lw80.sb4.p210
lexmark xm1140_firmwarev < lw80.sb4.p210lw80.sb4.p210
lexmark xm1145_firmwarev < lw80.sb4.p210lw80.sb4.p210
lexmark xm3150_firmwarev < lw80.sb7.p210lw80.sb7.p210
lexmark mx610_firmwarev < lw80.sb7.p210lw80.sb7.p210
lexmark mx611_firmwarev < lw80.sb7.p210lw80.sb7.p210
lexmark mx617_firmwarev < lw80.sb7.p210lw80.sb7.p210
lexmark m5163dn_firmwarev < lw80.dn2.p210lw80.dn2.p210
lexmark ms710_firmwarev < lw80.dn2.p210lw80.dn2.p210
lexmark ms711_firmwarev < lw80.dn2.p210lw80.dn2.p210
lexmark ms810dn_firmwarev < lw80.dn2.p210lw80.dn2.p210
lexmark ms811_firmwarev < lw80.dn2.p210lw80.dn2.p210
lexmark ms812dn_firmwarev < lw80.dn2.p210lw80.dn2.p210
lexmark ms817_firmwarev < lw80.dn2.p210lw80.dn2.p210
lexmark ms818_firmwarev < lw80.dn2.p210lw80.dn2.p210
lexmark ms810de_firmwarev < lw80.dn4.p210lw80.dn4.p210
lexmark m5155_firmwarev < lw80.dn4.p210lw80.dn4.p210
lexmark m5163de_firmwarev < lw80.dn4.p210lw80.dn4.p210
lexmark ms812de_firmwarev < lw80.dn7.p210lw80.dn7.p210
lexmark m5170_firmwarev < lw80.dn7.p210lw80.dn7.p210
lexmark mx710_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark mx711_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark mx717_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark mx718_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark mx810_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark mx811_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark mx812_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark xm5163_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark xm5170_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark xm5263_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark xm5270_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark xm7155_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark xm7163_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark xm7170_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark xm7263_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark xm7270_firmwarev < lw80.tu.p210lw80.tu.p210
lexmark ms911_firmwarev < lw80.sa.p210lw80.sa.p210
lexmark mx910_firmwarev < lw80.mg.p210lw80.mg.p210
lexmark mx911_firmwarev < lw80.mg.p210lw80.mg.p210
lexmark mx912_firmwarev < lw80.mg.p210lw80.mg.p210
lexmark xm9145_firmwarev < lw80.mg.p210lw80.mg.p210
lexmark xm9155_firmwarev < lw80.mg.p210lw80.mg.p210
lexmark xm9165_firmwarev < lw80.mg.p210lw80.mg.p210
lexmark mx6500e_firmwarev < lw80.jd.p210lw80.jd.p210
lexmark cs310_firmwarev < lw80.vyl.p210lw80.vyl.p210
lexmark cs317_firmwarev < lw80.vyl.p210lw80.vyl.p210
lexmark cs417_firmwarev < lw80.vy2.p210lw80.vy2.p210
lexmark cs410_firmwarev < lw80.vy2.p210lw80.vy2.p210
lexmark cs510_firmwarev < lw80.vy4.p210lw80.vy4.p210
lexmark cs517_firmwarev < lw80.vy4.p210lw80.vy4.p210
lexmark c2132_firmwarev < lw80.vy4.p210lw80.vy4.p210
lexmark cx310_firmwarev < lw80.gm2.p210lw80.gm2.p210
lexmark cx317_firmwarev < lw80.gm2.p210lw80.gm2.p210
lexmark cx410_firmwarev < lw80.gm4.p210lw80.gm4.p210
lexmark cx417_firmwarev < lw80.gm4.p210lw80.gm4.p210
lexmark xc2130_firmwarev < lw80.gm4.p210lw80.gm4.p210

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.