critical9.8
CVE-2021-44735
Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.
Impact
Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lexmark | B2236 Firmware | before mslsg.076.294 |
| Lexmark | Mb2236 Firmware | before mxlsg.076.294 |
| Lexmark | Ms431 Firmware | before mslbd.076.294 |
| Lexmark | Ms331 Firmware | before mslbd.076.294 |
| Lexmark | M1342 Firmware | before mslbd.076.294 |
| Lexmark | B3442 Firmware | before mslbd.076.294 |
| Lexmark | B3340 Firmware | before mslbd.076.294 |
| Lexmark | Xm1342 Firmware | before mslbd.076.294 |
| Lexmark | Mx331 Firmware | before mxlbd.076.294 |
| Lexmark | Mx431 Firmware | before mxlbd.076.294 |
| Lexmark | Mb3442 Firmware | before mxlbd.076.294 |
| Lexmark | Ms321 Firmware | before msngm.076.294 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.lexmark.com/alerts/
- https://www.zerodayinitiative.com/advisories/ZDI-22-326/
- https://www.zerodayinitiative.com/advisories/ZDI-22-329/
- https://www.zerodayinitiative.com/advisories/ZDI-22-330/
- https://support.lexmark.com/alerts/
- https://www.zerodayinitiative.com/advisories/ZDI-22-326/
- https://www.zerodayinitiative.com/advisories/ZDI-22-329/
- https://www.zerodayinitiative.com/advisories/ZDI-22-330/