CVE-2025-1127criticalCWE-22CWE-362

CVE-2025-1127: critical vulnerability in Lexmark CX, XC, CS, MS, MX, XM, et. al.

Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server

Published

Follow this CVE+ Monitor CX, XC, CS, MS, MX, XM, et. al.

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.1epss 0.5%
The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
Lexmark · CX, XC, CS, MS, MX, XM, et. al.
Related CVEs — Lexmark CX, XC, CS, MS, MX, XM, et. al.

In the same product, most dangerous first.

CVE-2024-11344HIGHType confusion vulnerability in the Postscript interpreter in various Lexmark devicesEPSS 0.5%CVE-2025-9269MEDIUMServer-Side Request Forgery (SSRF) vulnerability found in embedded web serverEPSS 0.3%