DeutschShown in its original language — a full translation is planned for a future version.
Lexmark Laser Printers: Mehrere Schwachstellen
view advisory published 2025-02-13
Ein Angreifer kann mehrere Schwachstellen in Lexmark Laserdruckern und dem Print Management Client ausnutzen, um beliebigen Code auszuführen und Sicherheitsmaßnahmen zu umgehen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-11347US | — | — | ||
Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be l… | ||||
| CVE-2024-11346US | — | — | ||
: Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Resource Injectio… | ||||
| CVE-2024-11345US | — | — | ||
A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitra… | ||||
| CVE-2024-11344US | — | — | ||
A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary… | ||||
| CVE-2025-1126US | — | — | ||
A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client. | ||||
| CVE-2024-11348US | — | — | ||
Eura7 CMSmanager in version 4.6 and below is vulnerable to Reflected XSS attacks through manipulation of return GET request parameter sent to a specific endpoint.
The vulnerability… | ||||
02
references
External citations — patches, advisories, analysis.
- National Vulnerability Database CVE-2024-11344 vom 2025-02-13external
- National Vulnerability Database CVE-2024-11345 vom 2025-02-13external
- National Vulnerability Database CVE-2024-11346 vom 2025-02-13external
- National Vulnerability Database CVE-2024-11347 vom 2025-02-13external
- National Vulnerability Database CVE-2024-11348 vom 2025-02-13external
- National Vulnerability Database CVE-2025-1126 vom 2025-02-13external
- WID-SEC-W-2025-0375 - CSAF Versionself
- WID-SEC-2025-0375 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan