High severity · published Jul 19, 2021
CVE-2021-35449
The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a…
7.8
CVSS
1.4%
EPSS
No
On KEV
Description
The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing during the add printer process, resulting in escalation of privileges to SYSTEM.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GD
G2 Driver · Lexmark
through 2.7.1.0 · source: NVD
GD
G3 Driver · Lexmark
through 3.2.0.0 · source: NVD
GD
G4 Driver · Lexmark
through 4.2.1.0 · source: NVD
UP
Universal Print Driver · Lexmark
through 2.15.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-35449
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-35449
Exploit
http://packetstormsecurity.com/files/163811/Lexmark-Driver-Privilege-Escalation.html
Vendor Advisory
http://support.lexmark.com/alerts/
Third Party Advisory
https://raw.githubusercontent.com/jacob-baines/vuln_disclosure/main/vuln_2021_02.txt