9.8

CVE-2023-23560

In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lexmark ≫ B2236 Firmware Version < mslsg.081.234
   Lexmark ≫ B2236 Version -
Lexmark ≫ B2338 Firmware Version < msngm.081.234
   Lexmark ≫ B2338 Version -
Lexmark ≫ B2442 Firmware Version < msngm.081.234
   Lexmark ≫ B2442 Version -
Lexmark ≫ B2546 Firmware Version < msngm.081.234
   Lexmark ≫ B2546 Version -
Lexmark ≫ B2650 Firmware Version < msngm.081.234
   Lexmark ≫ B2650 Version -
Lexmark ≫ B2865 Firmware Version < msngw.081.234
   Lexmark ≫ B2865 Version -
Lexmark ≫ B3340 Firmware Version < mslbd.081.234
   Lexmark ≫ B3340 Version -
Lexmark ≫ B3442 Firmware Version < mslbd.081.234
   Lexmark ≫ B3442 Version -
Lexmark ≫ C2240 Firmware Version < cstzj.081.234
   Lexmark ≫ C2240 Version -
Lexmark ≫ C2325 Firmware Version < csnzj.081.234
   Lexmark ≫ C2325 Version -
Lexmark ≫ C2326 Firmware Version < cslbn.081.234
   Lexmark ≫ C2326 Version -
Lexmark ≫ C2425 Firmware Version < csnzj.081.234
   Lexmark ≫ C2425 Version -
Lexmark ≫ C2535 Firmware Version < csnzj.081.234
   Lexmark ≫ C2535 Version -
Lexmark ≫ C3224 Firmware Version < cslbl.081.234
   Lexmark ≫ C3224 Version -
Lexmark ≫ C3326 Firmware Version < cslbl.081.234
   Lexmark ≫ C3326 Version -
Lexmark ≫ C3426 Firmware Version < cslbn.081.234
   Lexmark ≫ C3426 Version -
Lexmark ≫ C4150 Firmware Version < cstat.081.234
   Lexmark ≫ C4150 Version -
Lexmark ≫ C6160 Firmware Version < cstpp.081.234
   Lexmark ≫ C6160 Version -
Lexmark ≫ C9235 Firmware Version < cstmh.081.234
   Lexmark ≫ C9235 Version -
Lexmark ≫ Cs331 Firmware Version < cslbl.081.234
   Lexmark ≫ Cs331 Version -
Lexmark ≫ Cs421 Firmware Version < csnzj.081.234
   Lexmark ≫ Cs421 Version -
Lexmark ≫ Cs431 Firmware Version < cslbn.081.234
   Lexmark ≫ Cs431 Version -
Lexmark ≫ Cs439 Firmware Version < cslbn.081.234
   Lexmark ≫ Cs439 Version -
Lexmark ≫ Cs521 Firmware Version < csnzj.081.234
   Lexmark ≫ Cs521 Version -
Lexmark ≫ Cs622 Firmware Version < cstzj.081.234
   Lexmark ≫ Cs622 Version -
Lexmark ≫ Cs720 Firmware Version < cstat.081.234
   Lexmark ≫ Cs720 Version -
Lexmark ≫ Cs725 Firmware Version < cstat.081.234
   Lexmark ≫ Cs725 Version -
Lexmark ≫ Cs727 Firmware Version < cstat.081.234
   Lexmark ≫ Cs727 Version -
Lexmark ≫ Cs728 Firmware Version < cstat.081.234
   Lexmark ≫ Cs728 Version -
Lexmark ≫ Cs820 Firmware Version < cstpp.081.234
   Lexmark ≫ Cs820 Version -
Lexmark ≫ Cs827 Firmware Version < cstpp.081.234
   Lexmark ≫ Cs827 Version -
Lexmark ≫ Cs921 Firmware Version < cstmh.081.234
   Lexmark ≫ Cs921 Version -
Lexmark ≫ Cs923 Firmware Version < cstmh.081.234
   Lexmark ≫ Cs923 Version -
Lexmark ≫ Cs927 Firmware Version < cstmh.081.234
   Lexmark ≫ Cs927 Version -
Lexmark ≫ Cx331 Firmware Version < cxlbl.081.234
   Lexmark ≫ Cx331 Version -
Lexmark ≫ Cx421 Firmware Version < cxnzj.081.234
   Lexmark ≫ Cx421 Version -
Lexmark ≫ Cx431 Firmware Version < cxlbn.081.234
   Lexmark ≫ Cx431 Version -
Lexmark ≫ Cx522 Firmware Version < cxtzj.081.234
   Lexmark ≫ Cx522 Version -
Lexmark ≫ Cx622 Firmware Version < cxtzj.081.234
   Lexmark ≫ Cx622 Version -
Lexmark ≫ Cx625 Firmware Version < cxtzj.081.234
   Lexmark ≫ Cx625 Version -
Lexmark ≫ Cx725 Firmware Version < cxtat.081.234
   Lexmark ≫ Cx725 Version -
Lexmark ≫ Cx727 Firmware Version < cxtat.081.234
   Lexmark ≫ Cx727 Version -
Lexmark ≫ Cx820 Firmware Version < cxtpp.081.234
   Lexmark ≫ Cx820 Version -
Lexmark ≫ Cx825 Firmware Version < cxtpp.081.234
   Lexmark ≫ Cx825 Version -
Lexmark ≫ Cx860 Firmware Version < cxtpp.081.234
   Lexmark ≫ Cx860 Version -
Lexmark ≫ Cx920 Firmware Version < cxtmh.081.234
   Lexmark ≫ Cx920 Version -
Lexmark ≫ Cx921 Firmware Version < cxtmh.081.234
   Lexmark ≫ Cx921 Version -
Lexmark ≫ Cx922 Firmware Version < cxtmh.081.234
   Lexmark ≫ Cx922 Version -
Lexmark ≫ Cx923 Firmware Version < cxtmh.081.234
   Lexmark ≫ Cx923 Version -
Lexmark ≫ Cx924 Firmware Version < cxtmh.081.234
   Lexmark ≫ Cx924 Version -
Lexmark ≫ Cx944 Firmware Version < cxtpc.081.234
   Lexmark ≫ Cx944 Version -
Lexmark ≫ M1242 Firmware Version < msngm.081.234
   Lexmark ≫ M1242 Version -
Lexmark ≫ M1246 Firmware Version < msngm.081.234
   Lexmark ≫ M1246 Version -
Lexmark ≫ M1342 Firmware Version < mslbd.081.234
   Lexmark ≫ M1342 Version -
Lexmark ≫ M3250 Firmware Version < mstgm.081.234
   Lexmark ≫ M3250 Version -
Lexmark ≫ M5255 Firmware Version < mstgw.081.234
   Lexmark ≫ M5255 Version -
Lexmark ≫ M5270 Firmware Version < mstgw.081.234
   Lexmark ≫ M5270 Version -
Lexmark ≫ Mb2236 Firmware Version < mxlsg.081.234
   Lexmark ≫ Mb2236 Version -
Lexmark ≫ Mb2338 Firmware Version < mxngm.081.234
   Lexmark ≫ Mb2338 Version -
Lexmark ≫ Mb2442 Firmware Version < mxtgm.081.234
   Lexmark ≫ Mb2442 Version -
Lexmark ≫ Mb2546 Firmware Version < mxtgm.081.234
   Lexmark ≫ Mb2546 Version -
Lexmark ≫ Mb2650 Firmware Version < mxtgm.081.234
   Lexmark ≫ Mb2650 Version -
Lexmark ≫ Mb2770 Firmware Version < mxtgw.081.234
   Lexmark ≫ Mb2770 Version -
Lexmark ≫ Mb3442 Firmware Version < mxlbd.081.234
   Lexmark ≫ Mb3442 Version -
Lexmark ≫ Mc2325 Firmware Version < cxnzj.081.234
   Lexmark ≫ Mc2325 Version -
Lexmark ≫ Mc2425 Firmware Version < cxnzj.081.234
   Lexmark ≫ Mc2425 Version -
Lexmark ≫ Mc2535 Firmware Version < cxtzj.081.234
   Lexmark ≫ Mc2535 Version -
Lexmark ≫ Mc2640 Firmware Version < cxtzj.081.234
   Lexmark ≫ Mc2640 Version -
Lexmark ≫ Mc3224 Firmware Version < cxlbl.081.234
   Lexmark ≫ Mc3224 Version -
Lexmark ≫ Mc3326 Firmware Version < cxlbl.081.234
   Lexmark ≫ Mc3326 Version -
Lexmark ≫ Mc3426 Firmware Version < cxlbn.081.234
   Lexmark ≫ Mc3426 Version -
Lexmark ≫ Ms321 Firmware Version < msngm.081.234
   Lexmark ≫ Ms321 Version -
Lexmark ≫ Ms331 Firmware Version < mslbd.081.234
   Lexmark ≫ Ms331 Version -
Lexmark ≫ Ms421 Firmware Version < msngm.081.234
   Lexmark ≫ Ms421 Version -
Lexmark ≫ Ms431 Firmware Version < mslbd.081.234
   Lexmark ≫ Ms431 Version -
Lexmark ≫ Ms521 Firmware Version < msngm.081.234
   Lexmark ≫ Ms521 Version -
Lexmark ≫ Ms621 Firmware Version < msngm.081.234
   Lexmark ≫ Ms621 Version -
Lexmark ≫ Ms622 Firmware Version < mstgm.081.234
   Lexmark ≫ Ms622 Version -
Lexmark ≫ Ms725 Firmware Version < msngw.081.234
   Lexmark ≫ Ms725 Version -
Lexmark ≫ Ms821 Firmware Version < msngw.081.234
   Lexmark ≫ Ms821 Version -
Lexmark ≫ Ms822 Firmware Version < mstgw.081.234
   Lexmark ≫ Ms822 Version -
Lexmark ≫ Ms823 Firmware Version < msngw.081.234
   Lexmark ≫ Ms823 Version -
Lexmark ≫ Ms825 Firmware Version < msngw.081.234
   Lexmark ≫ Ms825 Version -
Lexmark ≫ Ms826 Firmware Version < mstgw.081.234
   Lexmark ≫ Ms826 Version -
Lexmark ≫ Mx321 Firmware Version < mxngm.081.234
   Lexmark ≫ Mx321 Version -
Lexmark ≫ Mx331 Firmware Version < mxlbd.081.234
   Lexmark ≫ Mx331 Version -
Lexmark ≫ Mx421 Firmware Version < mxtgm.081.234
   Lexmark ≫ Mx421 Version -
Lexmark ≫ Mx431 Firmware Version < mxlbd.081.234
   Lexmark ≫ Mx431 Version -
Lexmark ≫ Mx432 Firmware Version < mxtct.081.234
   Lexmark ≫ Mx432 Version -
Lexmark ≫ Mx521 Firmware Version < mxtgm.081.234
   Lexmark ≫ Mx521 Version -
Lexmark ≫ Mx522 Firmware Version < mxtgm.081.234
   Lexmark ≫ Mx522 Version -
Lexmark ≫ Mx622 Firmware Version < mxtgm.081.234
   Lexmark ≫ Mx622 Version -
Lexmark ≫ Mx721 Firmware Version < mxtgw.081.234
   Lexmark ≫ Mx721 Version -
Lexmark ≫ Mx722 Firmware Version < mxtgw.081.234
   Lexmark ≫ Mx722 Version -
Lexmark ≫ Mx822 Firmware Version < mxtgw.081.234
   Lexmark ≫ Mx822 Version -
Lexmark ≫ Mx826 Firmware Version < mxtgw.081.234
   Lexmark ≫ Mx826 Version -
Lexmark ≫ Mx931 Firmware Version < mxtpm.081.234
   Lexmark ≫ Mx931 Version -
Lexmark ≫ Xc2235 Firmware Version < cxtzj.081.234
   Lexmark ≫ Xc2235 Version -
Lexmark ≫ Xc2326 Firmware Version < cxlbn.081.234
   Lexmark ≫ Xc2326 Version -
Lexmark ≫ Xc4140 Firmware Version < cxtat.081.234
   Lexmark ≫ Xc4140 Version -
Lexmark ≫ Xc4143 Firmware Version < cxtat.081.234
   Lexmark ≫ Xc4143 Version -
Lexmark ≫ Xc4150 Firmware Version < cxtat.081.234
   Lexmark ≫ Xc4150 Version -
Lexmark ≫ Xc4153 Firmware Version < cxtat.081.234
   Lexmark ≫ Xc4153 Version -
Lexmark ≫ Xc4240 Firmware Version < cxtzj.081.234
   Lexmark ≫ Xc4240 Version -
Lexmark ≫ Xc4342 Firmware Version < cxtmm.081.234
   Lexmark ≫ Xc4342 Version -
Lexmark ≫ Xc4352 Firmware Version < cxtmm.081.234
   Lexmark ≫ Xc4352 Version -
Lexmark ≫ Xc6152 Firmware Version < cxtpp.081.234
   Lexmark ≫ Xc6152 Version -
Lexmark ≫ Xc6153 Firmware Version < cxtpp.081.234
   Lexmark ≫ Xc6153 Version -
Lexmark ≫ Xc8155 Firmware Version < cxtpp.081.234
   Lexmark ≫ Xc8155 Version -
Lexmark ≫ Xc8160 Firmware Version < cxtpp.081.234
   Lexmark ≫ Xc8160 Version -
Lexmark ≫ Xc8163 Firmware Version < cxtpp.081.234
   Lexmark ≫ Xc8163 Version -
Lexmark ≫ Xc9225 Firmware Version < cxtmh.081.234
   Lexmark ≫ Xc9225 Version -
Lexmark ≫ Xc9235 Firmware Version < cxtmh.081.234
   Lexmark ≫ Xc9235 Version -
Lexmark ≫ Xc9245 Firmware Version < cxtmh.081.234
   Lexmark ≫ Xc9245 Version -
Lexmark ≫ Xc9255 Firmware Version < cxtmh.081.234
   Lexmark ≫ Xc9255 Version -
Lexmark ≫ Xc9265 Firmware Version < cxtmh.081.234
   Lexmark ≫ Xc9265 Version -
Lexmark ≫ Xc9335 Firmware Version < cxtpc.081.234
   Lexmark ≫ Xc9335 Version -
Lexmark ≫ Xc9445 Firmware Version < cxtpc.081.234
   Lexmark ≫ Xc9445 Version -
Lexmark ≫ Xc9455 Firmware Version < cxtpc.081.234
   Lexmark ≫ Xc9455 Version -
Lexmark ≫ Xc9465 Firmware Version < cxtpc.081.234
   Lexmark ≫ Xc9465 Version -
Lexmark ≫ Xm1242 Firmware Version < mxtgm.081.234
   Lexmark ≫ Xm1242 Version -
Lexmark ≫ Xm1246 Firmware Version < mxtgm.081.234
   Lexmark ≫ Xm1246 Version -
Lexmark ≫ Xm1342 Firmware Version < mslbd.081.234
   Lexmark ≫ Xm1342 Version -
Lexmark ≫ Xm3142 Firmware Version < mxtct.081.234
   Lexmark ≫ Xm3142 Version -
Lexmark ≫ Xm3250 Firmware Version < mxtgm.081.234
   Lexmark ≫ Xm3250 Version -
Lexmark ≫ Xm5365 Firmware Version < mxtgw.081.234
   Lexmark ≫ Xm5365 Version -
Lexmark ≫ Xm7355 Firmware Version < mxtgw.081.234
   Lexmark ≫ Xm7355 Version -
Lexmark ≫ Xm7370 Firmware Version < mxtgw.081.234
   Lexmark ≫ Xm7370 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 13.87% 0.961
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADP 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-918 Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

https://support.lexmark.com/alerts/
Vendor Advisory
https://publications.lexmark.com/publications/security-alerts/CVE-2023-23560.pdf
Vendor Advisory