CVE-2023-23560
Critical
Description
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.
SeverityCritical
CVSS9.8
Exploit probability—
ProductLexmark B2236 Firmware
PublishedJan 23, 2023
First seenJan 23, 2023
Weakness typeCWE-20Improper input validation
How to fix
Update
- lexmark b2236_firmwaremslsg.081.234 or later
- lexmark b2338_firmwaremsngm.081.234 or later
- lexmark b2442_firmwaremsngm.081.234 or later
- lexmark b2546_firmwaremsngm.081.234 or later
- lexmark b2650_firmwaremsngm.081.234 or later
- lexmark b2865_firmwaremsngw.081.234 or later
- lexmark b3340_firmwaremslbd.081.234 or later
- lexmark b3442_firmwaremslbd.081.234 or later
- lexmark c2240_firmwarecstzj.081.234 or later
- lexmark c2325_firmwarecsnzj.081.234 or later
- lexmark c2326_firmwarecslbn.081.234 or later
- lexmark c2425_firmwarecsnzj.081.234 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lexmark b2236_firmware | v < mslsg.081.234 | mslsg.081.234 |
| lexmark b2338_firmware | v < msngm.081.234 | msngm.081.234 |
| lexmark b2442_firmware | v < msngm.081.234 | msngm.081.234 |
| lexmark b2546_firmware | v < msngm.081.234 | msngm.081.234 |
| lexmark b2650_firmware | v < msngm.081.234 | msngm.081.234 |
| lexmark b2865_firmware | v < msngw.081.234 | msngw.081.234 |
| lexmark b3340_firmware | v < mslbd.081.234 | mslbd.081.234 |
| lexmark b3442_firmware | v < mslbd.081.234 | mslbd.081.234 |
| lexmark c2240_firmware | v < cstzj.081.234 | cstzj.081.234 |
| lexmark c2325_firmware | v < csnzj.081.234 | csnzj.081.234 |
| lexmark c2326_firmware | v < cslbn.081.234 | cslbn.081.234 |
| lexmark c2425_firmware | v < csnzj.081.234 | csnzj.081.234 |
| lexmark c2535_firmware | v < csnzj.081.234 | csnzj.081.234 |
| lexmark c3224_firmware | v < cslbl.081.234 | cslbl.081.234 |
| lexmark c3326_firmware | v < cslbl.081.234 | cslbl.081.234 |
| lexmark c3426_firmware | v < cslbn.081.234 | cslbn.081.234 |
| lexmark c4150_firmware | v < cstat.081.234 | cstat.081.234 |
| lexmark c6160_firmware | v < cstpp.081.234 | cstpp.081.234 |
| lexmark c9235_firmware | v < cstmh.081.234 | cstmh.081.234 |
| lexmark cs331_firmware | v < cslbl.081.234 | cslbl.081.234 |
| lexmark cs421_firmware | v < csnzj.081.234 | csnzj.081.234 |
| lexmark cs431_firmware | v < cslbn.081.234 | cslbn.081.234 |
| lexmark cs439_firmware | v < cslbn.081.234 | cslbn.081.234 |
| lexmark cs521_firmware | v < csnzj.081.234 | csnzj.081.234 |
| lexmark cs622_firmware | v < cstzj.081.234 | cstzj.081.234 |
| lexmark cs720_firmware | v < cstat.081.234 | cstat.081.234 |
| lexmark cs725_firmware | v < cstat.081.234 | cstat.081.234 |
| lexmark cs727_firmware | v < cstat.081.234 | cstat.081.234 |
| lexmark cs728_firmware | v < cstat.081.234 | cstat.081.234 |
| lexmark cs820_firmware | v < cstpp.081.234 | cstpp.081.234 |
| lexmark cs827_firmware | v < cstpp.081.234 | cstpp.081.234 |
| lexmark cs921_firmware | v < cstmh.081.234 | cstmh.081.234 |
| lexmark cs923_firmware | v < cstmh.081.234 | cstmh.081.234 |
| lexmark cs927_firmware | v < cstmh.081.234 | cstmh.081.234 |
| lexmark cx331_firmware | v < cxlbl.081.234 | cxlbl.081.234 |
| lexmark cx421_firmware | v < cxnzj.081.234 | cxnzj.081.234 |
| lexmark cx431_firmware | v < cxlbn.081.234 | cxlbn.081.234 |
| lexmark cx522_firmware | v < cxtzj.081.234 | cxtzj.081.234 |
| lexmark cx622_firmware | v < cxtzj.081.234 | cxtzj.081.234 |
| lexmark cx625_firmware | v < cxtzj.081.234 | cxtzj.081.234 |
| lexmark cx725_firmware | v < cxtat.081.234 | cxtat.081.234 |
| lexmark cx727_firmware | v < cxtat.081.234 | cxtat.081.234 |
| lexmark cx820_firmware | v < cxtpp.081.234 | cxtpp.081.234 |
| lexmark cx825_firmware | v < cxtpp.081.234 | cxtpp.081.234 |
| lexmark cx860_firmware | v < cxtpp.081.234 | cxtpp.081.234 |
| lexmark cx920_firmware | v < cxtmh.081.234 | cxtmh.081.234 |
| lexmark cx921_firmware | v < cxtmh.081.234 | cxtmh.081.234 |
| lexmark cx922_firmware | v < cxtmh.081.234 | cxtmh.081.234 |
| lexmark cx923_firmware | v < cxtmh.081.234 | cxtmh.081.234 |
| lexmark cx924_firmware | v < cxtmh.081.234 | cxtmh.081.234 |
| lexmark cx944_firmware | v < cxtpc.081.234 | cxtpc.081.234 |
| lexmark m1242_firmware | v < msngm.081.234 | msngm.081.234 |
| lexmark m1246_firmware | v < msngm.081.234 | msngm.081.234 |
| lexmark m1342_firmware | v < mslbd.081.234 | mslbd.081.234 |
| lexmark m3250_firmware | v < mstgm.081.234 | mstgm.081.234 |
| lexmark m5255_firmware | v < mstgw.081.234 | mstgw.081.234 |
| lexmark m5270_firmware | v < mstgw.081.234 | mstgw.081.234 |
| lexmark mb2236_firmware | v < mxlsg.081.234 | mxlsg.081.234 |
| lexmark mb2338_firmware | v < mxngm.081.234 | mxngm.081.234 |
| lexmark mb2442_firmware | v < mxtgm.081.234 | mxtgm.081.234 |
| lexmark mb2546_firmware | v < mxtgm.081.234 | mxtgm.081.234 |
| lexmark mb2650_firmware | v < mxtgm.081.234 | mxtgm.081.234 |
| lexmark mb2770_firmware | v < mxtgw.081.234 | mxtgw.081.234 |
| lexmark mb3442_firmware | v < mxlbd.081.234 | mxlbd.081.234 |
| lexmark mc2325_firmware | v < cxnzj.081.234 | cxnzj.081.234 |
| lexmark mc2425_firmware | v < cxnzj.081.234 | cxnzj.081.234 |
| lexmark mc2535_firmware | v < cxtzj.081.234 | cxtzj.081.234 |
| lexmark mc2640_firmware | v < cxtzj.081.234 | cxtzj.081.234 |
| lexmark mc3224_firmware | v < cxlbl.081.234 | cxlbl.081.234 |
| lexmark mc3326_firmware | v < cxlbl.081.234 | cxlbl.081.234 |
| lexmark mc3426_firmware | v < cxlbn.081.234 | cxlbn.081.234 |
| lexmark ms321_firmware | v < msngm.081.234 | msngm.081.234 |
| lexmark ms331_firmware | v < mslbd.081.234 | mslbd.081.234 |
| lexmark ms421_firmware | v < msngm.081.234 | msngm.081.234 |
| lexmark ms431_firmware | v < mslbd.081.234 | mslbd.081.234 |
| lexmark ms521_firmware | v < msngm.081.234 | msngm.081.234 |
| lexmark ms621_firmware | v < msngm.081.234 | msngm.081.234 |
| lexmark ms622_firmware | v < mstgm.081.234 | mstgm.081.234 |
| lexmark ms725_firmware | v < msngw.081.234 | msngw.081.234 |
| lexmark ms821_firmware | v < msngw.081.234 | msngw.081.234 |
| lexmark ms822_firmware | v < mstgw.081.234 | mstgw.081.234 |
| lexmark ms823_firmware | v < msngw.081.234 | msngw.081.234 |
| lexmark ms825_firmware | v < msngw.081.234 | msngw.081.234 |
| lexmark ms826_firmware | v < mstgw.081.234 | mstgw.081.234 |
| lexmark mx321_firmware | v < mxngm.081.234 | mxngm.081.234 |
| lexmark mx331_firmware | v < mxlbd.081.234 | mxlbd.081.234 |
| lexmark mx421_firmware | v < mxtgm.081.234 | mxtgm.081.234 |
| lexmark mx431_firmware | v < mxlbd.081.234 | mxlbd.081.234 |
| lexmark mx432_firmware | v < mxtct.081.234 | mxtct.081.234 |
| lexmark mx521_firmware | v < mxtgm.081.234 | mxtgm.081.234 |
| lexmark mx522_firmware | v < mxtgm.081.234 | mxtgm.081.234 |
| lexmark mx622_firmware | v < mxtgm.081.234 | mxtgm.081.234 |
| lexmark mx721_firmware | v < mxtgw.081.234 | mxtgw.081.234 |
| lexmark mx722_firmware | v < mxtgw.081.234 | mxtgw.081.234 |
| lexmark mx822_firmware | v < mxtgw.081.234 | mxtgw.081.234 |
| lexmark mx826_firmware | v < mxtgw.081.234 | mxtgw.081.234 |
| lexmark mx931_firmware | v < mxtpm.081.234 | mxtpm.081.234 |
| lexmark xc2235_firmware | v < cxtzj.081.234 | cxtzj.081.234 |
| lexmark xc2326_firmware | v < cxlbn.081.234 | cxlbn.081.234 |
| lexmark xc4140_firmware | v < cxtat.081.234 | cxtat.081.234 |
| lexmark xc4143_firmware | v < cxtat.081.234 | cxtat.081.234 |
| lexmark xc4150_firmware | v < cxtat.081.234 | cxtat.081.234 |
| lexmark xc4153_firmware | v < cxtat.081.234 | cxtat.081.234 |
| lexmark xc4240_firmware | v < cxtzj.081.234 | cxtzj.081.234 |
| lexmark xc4342_firmware | v < cxtmm.081.234 | cxtmm.081.234 |
| lexmark xc4352_firmware | v < cxtmm.081.234 | cxtmm.081.234 |
| lexmark xc6152_firmware | v < cxtpp.081.234 | cxtpp.081.234 |
| lexmark xc6153_firmware | v < cxtpp.081.234 | cxtpp.081.234 |
| lexmark xc8155_firmware | v < cxtpp.081.234 | cxtpp.081.234 |
| lexmark xc8160_firmware | v < cxtpp.081.234 | cxtpp.081.234 |
| lexmark xc8163_firmware | v < cxtpp.081.234 | cxtpp.081.234 |
| lexmark xc9225_firmware | v < cxtmh.081.234 | cxtmh.081.234 |
| lexmark xc9235_firmware | v < cxtmh.081.234 | cxtmh.081.234 |
| lexmark xc9245_firmware | v < cxtmh.081.234 | cxtmh.081.234 |
| lexmark xc9255_firmware | v < cxtmh.081.234 | cxtmh.081.234 |
| lexmark xc9265_firmware | v < cxtmh.081.234 | cxtmh.081.234 |
| lexmark xc9335_firmware | v < cxtpc.081.234 | cxtpc.081.234 |
| lexmark xc9445_firmware | v < cxtpc.081.234 | cxtpc.081.234 |
| lexmark xc9455_firmware | v < cxtpc.081.234 | cxtpc.081.234 |
| lexmark xc9465_firmware | v < cxtpc.081.234 | cxtpc.081.234 |
| lexmark xm1242_firmware | v < mxtgm.081.234 | mxtgm.081.234 |
| lexmark xm1246_firmware | v < mxtgm.081.234 | mxtgm.081.234 |
| lexmark xm1342_firmware | v < mslbd.081.234 | mslbd.081.234 |
| lexmark xm3142_firmware | v < mxtct.081.234 | mxtct.081.234 |
| lexmark xm3250_firmware | v < mxtgm.081.234 | mxtgm.081.234 |
| lexmark xm5365_firmware | v < mxtgw.081.234 | mxtgw.081.234 |
| lexmark xm7355_firmware | v < mxtgw.081.234 | mxtgw.081.234 |
| lexmark xm7370_firmware | v < mxtgw.081.234 | mxtgw.081.234 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.