CVE-2023-26070
Critical
Description
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).
SeverityCritical
CVSS9.8
Exploit probability—
ProductLexmark Cxtpc Firmware
PublishedApr 10, 2023
First seenApr 10, 2023
Weakness typeCWE-20Improper input validation
How to fix
Update
- lexmark cxtpc_firmwarecxtpc.081.232 or later
- lexmark cstpc_firmwarecstpc.081.232 or later
- lexmark mxtct_firmwaremxtct.081.232 or later
- lexmark mxtpm_firmwaremxtpm.081.232 or later
- lexmark cxtmm_firmwarecxtmm.081.232 or later
- lexmark mslsg_firmwaremslsg.081.232 or later
- lexmark mxlsg_firmwaremxlsg.081.232 or later
- lexmark mslbd_firmwaremslbd.081.232 or later
- lexmark mxlbd_firmwaremxlbd.081.232 or later
- lexmark msngm_firmwaremsngm.081.232 or later
- lexmark mxngm_firmwaremxngm.081.232 or later
- lexmark mxtgm_firmwaremxtgm.081.232 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lexmark cxtpc_firmware | v < cxtpc.081.232 | cxtpc.081.232 |
| lexmark cstpc_firmware | v < cstpc.081.232 | cstpc.081.232 |
| lexmark mxtct_firmware | v < mxtct.081.232 | mxtct.081.232 |
| lexmark mxtpm_firmware | v < mxtpm.081.232 | mxtpm.081.232 |
| lexmark cxtmm_firmware | v < cxtmm.081.232 | cxtmm.081.232 |
| lexmark mslsg_firmware | v < mslsg.081.232 | mslsg.081.232 |
| lexmark mxlsg_firmware | v < mxlsg.081.232 | mxlsg.081.232 |
| lexmark mslbd_firmware | v < mslbd.081.232 | mslbd.081.232 |
| lexmark mxlbd_firmware | v < mxlbd.081.232 | mxlbd.081.232 |
| lexmark msngm_firmware | v < msngm.081.232 | msngm.081.232 |
| lexmark mxngm_firmware | v < mxngm.081.232 | mxngm.081.232 |
| lexmark mxtgm_firmware | v < mxtgm.081.232 | mxtgm.081.232 |
| lexmark msngw_firmware | v < msngw.081.232 | msngw.081.232 |
| lexmark mstgw_firmware | v < mstgw.081.232 | mstgw.081.232 |
| lexmark mxtgw_firmware | v < mxtgw.081.232 | mxtgw.081.232 |
| lexmark cslbn_firmware | v < cslbn.081.232 | cslbn.081.232 |
| lexmark cslbl_firmware | v < cslbl.081.232 | cslbl.081.232 |
| lexmark cxlbn_firmware | v < cxlbn.081.232 | cxlbn.081.232 |
| lexmark cxlbl_firmware | v < cxlbl.081.232 | cxlbl.081.232 |
| lexmark csnzj_firmware | v < csnzj.081.232 | csnzj.081.232 |
| lexmark cxtzj_firmware | v < cxtzj.081.232 | cxtzj.081.232 |
| lexmark cstzj_firmware | v < cstzj.081.232 | cstzj.081.232 |
| lexmark lw80_firmware | v < lw80.sb7.p234, v < lw80.dn2.p234, v < lw80.dn4.p234, v < lw80.dn7.p234, v < lw80.tu.p234, v < lw80.sa.p234, v < lw80.mg.p234, v < lw80.jd.p234, v < lw80.vyl.p234, v < lw80.vy2.p234, v < lw80.vy4.p234, v < lw80.gm2.p234, v < lw80.gm4.p234, v < lw80.gm7.p234 | lw80.sb7.p234, lw80.dn2.p234, lw80.dn4.p234, lw80.dn7.p234, lw80.tu.p234, lw80.sa.p234, lw80.mg.p234, lw80.jd.p234, lw80.vyl.p234, lw80.vy2.p234, lw80.vy4.p234, lw80.gm2.p234, lw80.gm4.p234, lw80.gm7.p234 |
| lexmark lhs60_firmware | v < lhs60.cm2.p760, v < lhs60.cm4.p760, v < lhs60.hc.p760, v < lhs60.hv.p760, v < lhs60.tp.p760, v < lhs60.vk.p760, v < lhs60.ny.p760, v < lhs60.mr.p760, v < lhs60.hk.p760, v < lhs60.tq.p760, v < lhs60.jr.p760 | lhs60.cm2.p760, lhs60.cm4.p760, lhs60.hc.p760, lhs60.hv.p760, lhs60.tp.p760, lhs60.vk.p760, lhs60.ny.p760, lhs60.mr.p760, lhs60.hk.p760, lhs60.tq.p760, lhs60.jr.p760 |
| lexmark lr_firmware | v < lr.sk.p838, v < lr.ske.p838, v < lr.lbh.p838, v < lr.jp.p838, v < lr.bs.p838, v < lr.mn.p838, v < lr.fl.p838 | lr.sk.p838, lr.ske.p838, lr.lbh.p838, lr.jp.p838, lr.bs.p838, lr.mn.p838, lr.fl.p838 |
| lexmark lp_firmware | v < lp.jb.p837, v < lp.sp.p837 | lp.jb.p837, lp.sp.p837 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.