Login Request a demo
Critical severity · published Apr 10, 2023
CVE-2023-26063
Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type
9.8
CVSS
0.7%
EPSS
No
On KEV
Description
Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Cslbl Firmware · Lexmark
before cslbl.081.232 · source: NVD
CF
Cslbn Firmware · Lexmark
before cslbn.081.232; before cslbn.081.232 · source: NVD
CF
Csnzj Firmware · Lexmark
before csnzj.081.232; before csnzj.081.232; before csnzj.081.232 · source: NVD
CF
Cstpc Firmware · Lexmark
before cstpc.081.232 · source: NVD
CF
Cstzj Firmware · Lexmark
before cstzj.081.232 · source: NVD
CF
Cxlbl Firmware · Lexmark
before cxlbl.081.232 · source: NVD
CF
Cxlbn Firmware · Lexmark
before cxlbn.081.232 · source: NVD
CF
Cxtmm Firmware · Lexmark
before cxtmm.081.232 · source: NVD
CF
Cxtpc Firmware · Lexmark
before cxtpc.081.232 · source: NVD
CF
Cxtzj Firmware · Lexmark
before cxtzj.081.232 · source: NVD
LF
LP Firmware · Lexmark
before lp.jb.p837; before lp.sp.p837 · source: NVD
LF
LR Firmware · Lexmark
before lr.sk.p838; before lr.ske.p838; before lr.lbh.p838; before lr.jp.p838; before lr.bs.p838; before lr.mn.p838; +2 more · source: NVD
Affected product
CF
Cslbl Firmware
Lexmark
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-26063
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-26063
Vendor Advisory
https://publications.lexmark.com/publications/security-alerts/CVE-2023-26063.pdf
Vendor Advisory
https://support.lexmark.com/alerts/
More from Cslbl Firmware
9.8
CVE-2023-26070
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4)
9.8
CVE-2023-26069
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4)
9.8
CVE-2023-26068
Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4)
9.8
CVE-2023-26066
Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index
9.8
CVE-2023-26065
Certain Lexmark devices through 2023-02-19 have an Integer Overflow