CVE-2023-26070

Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4)

Critical · published April 10, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
52.9
In the wild
Unconfirmed
What it is

🔥 A sneaky input validation flaw lurks in Lexmark devices, exposing an easy entry point for attackers! Think of it like a hotel that doesn't check IDs at check-in — anyone can walk right in without verification, potentially causing chaos! This critical vulnerability could allow an attacker to manipulate the device's functionalities remotely, leading to unauthorized access, data exposure, or even full device control. With a CVSS score of 9.8, the potential damage is absolutely devastating!

Put simply

Think of it like a hotel that doesn't check IDs at check-in — anyone can walk right in without verification, potentially causing chaos! CVE-2023-26070 arises from a failure in input validation on certain Lexmark devices, which allows attackers to bypass security measures and execute unauthorized commands.

What to do

This critical vulnerability could allow an attacker to manipulate the device's functionalities remotely, leading to unauthorized access, data exposure, or even full device control. With a CVSS score of 9.8, the potential damage is absolutely devastating! Patch all affected Lexmark devices immediately to the latest firmware version released after February 19, 2023. Ensure that your device settings enforce robust input validation to block any unauthorized actions and audit your security policies to identify any other potential weaknesses. You've got this! Follow these steps and you'll secure your devices in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00708 · 52.9th percentile
Published
2023-04-10T00:00Z
EPSS history
Timeline
  • 10 APR 00:00Z
    Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4)
    cvelistv5