CVE-2023-50738mediumCWE-1328CWE-354

CVE-2023-50738: medium-severity vulnerability in Lexmark Printer Firmware

A firmware downgrade prevention vulnerability has been identified in newer Lexmark devices.

Published

Follow this CVE+ Monitor Printer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.3%
A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified.
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Affected products
Lexmark · Printer Firmware
Related CVEs — Lexmark Printer Firmware

In the same product, most dangerous first.

CVE-2023-50739HIGHA buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices.EPSS 0.6%