CVE-2025-1126CWE-807

Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC).

Critical · published February 11, 2025

CVSS v3.1
9.3
EPSS
0%
Percentile
15.8
In the wild
Unconfirmed
What it is

🔥 An untrusted input vulnerability in the Lexmark Print Management Client could let an attacker hijack crucial security decisions. Yikes! Think of it like a restaurant that lets anyone suggest menu changes without checking if they’re a qualified chef. If you trust just anybody, the next special could be a culinary catastrophe! An attacker could exploit this vulnerability to manipulate security logic, potentially leading to unauthorized access to sensitive printing jobs or network resources. This could result in compromised data, leaked documents, or even the printing of confidential information without approval. It's a recipe for disaster!

Put simply

Think of it like a restaurant that lets anyone suggest menu changes without checking if they’re a qualified chef. If you trust just anybody, the next special could be a culinary catastrophe! This vulnerability arises from the client's reliance on untrusted inputs when making security decisions, allowing malicious data to influence critical system behavior.

What to do

An attacker could exploit this vulnerability to manipulate security logic, potentially leading to unauthorized access to sensitive printing jobs or network resources. This could result in compromised data, leaked documents, or even the printing of confidential information without approval. It's a recipe for disaster! Immediately update the Lexmark Print Management Client to the latest version available. Additionally, implement strict input validation measures to ensure that only trusted sources can influence security decisions. Don't wait; your security is at stake! You've got this! By taking these steps, you can secure your print management system in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.3 · CRITICAL
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00252 · 15.8th percentile
Weakness
CWE-807 · Reliance on Untrusted Inputs in a Security Decision
Published
2025-02-11T16:50Z
EPSS history
Timeline
  • 11 FEB 16:50Z
    Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC).
    cvelistv5