Medium severity · published Apr 22, 2016
CVE-2016-3145
Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk…
4.6
CVSS
0.3%
EPSS
No
On KEV
Description
Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on non-volatile memory.
CVSS vector
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PF
Printer Firmware · Lexmark
pp through pp.021.062; cb through cb.021.062; yk through yk.021.062; yk through yk.021.057; atl through atl.021.062 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-3145
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-3145
Vendor Advisory
http://support.lexmark.com/index?page=content&id=TE760
More from Printer Firmware
9.8
CVE-2016-1896
Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows…