CVE-2023-50735

A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.

Critical · published February 28, 2024

CVSS v3.1
9.0
EPSS
1%
Percentile
55.0
In the wild
Unconfirmed
What it is

🔥 A heap corruption vulnerability in Lexmark devices is a ticking time bomb that could allow attackers to execute arbitrary code! Think of it like a faulty machine on an assembly line — one misstep can lead to a cascade of malfunctioning parts, compromising the entire operation. This bug in the PostScript interpreter could let an intruder take control of the device, creating chaos! If exploited, an attacker could run their own code on the affected Lexmark devices, potentially leading to unauthorized actions such as data theft, system manipulation, or even a total takeover. With such access, they could wreak absolute havoc, rendering your printer a security liability.

Put simply

Think of it like a faulty machine on an assembly line — one misstep can lead to a cascade of malfunctioning parts, compromising the entire operation. This bug in the PostScript interpreter could let an intruder take control of the device, creating chaos! This heap corruption vulnerability occurs in the PostScript interpreter of various Lexmark devices, allowing attackers to manipulate memory and execute arbitrary commands. This could lead to full control of the device by sending specially crafted PostScript files.

What to do

If exploited, an attacker could run their own code on the affected Lexmark devices, potentially leading to unauthorized actions such as data theft, system manipulation, or even a total takeover. With such access, they could wreak absolute havoc, rendering your printer a security liability. Immediate action is necessary! Update your Lexmark devices with the latest firmware to patch this vulnerability. Ensure you regularly check for updates and review your printer's security settings to tighten defenses. You've got this! By tackling updates now, you're putting on your security cape and protecting your network! 🦸‍♀️🦸‍♂️

The record
Technical detail
CVSS v3.1
9.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00766 · 55.0th percentile
Published
2024-02-28T02:37Z
EPSS history
Timeline
  • 28 FEB 02:37Z
    A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.
    cvelistv5