NetSight
IP …
critical9.8

CVE-2021-44734

Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to remote code execution on the device.

Impact

Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to remote code execution on the device.

Affected products

VendorProductAffected versions
LexmarkB2236 Firmware
before mslsg.076.294
LexmarkMb2236 Firmware
before mxlsg.076.294
LexmarkMs431 Firmware
before mslbd.076.294
LexmarkMs331 Firmware
before mslbd.076.294
LexmarkM1342 Firmware
before mslbd.076.294
LexmarkB3442 Firmware
before mslbd.076.294
LexmarkB3340 Firmware
before mslbd.076.294
LexmarkXm1342 Firmware
before mslbd.076.294
LexmarkMx331 Firmware
before mxlbd.076.294
LexmarkMx431 Firmware
before mxlbd.076.294
LexmarkMb3442 Firmware
before mxlbd.076.294
LexmarkMs321 Firmware
before msngm.076.294

Weakness classification

CWE-94

References