CVE-2021-44735: Lexmark b2236 Firmware

Critical severity, CVSS 9.8. EPSS: 7% chance of exploitation in the next 30 days.

Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.

Affected products

  • Lexmark b2236 Firmware: before mslsg.076.294 (fixed in mslsg.076.294)
  • Lexmark b2338 Firmware: before msngm.076.294 (fixed in msngm.076.294)
  • Lexmark b2442 Firmware: before msngm.076.294 (fixed in msngm.076.294)
  • Lexmark b2546 Firmware: before msngm.076.294 (fixed in msngm.076.294)
  • Lexmark b2650 Firmware: before msngm.076.294 (fixed in msngm.076.294)
  • Lexmark b2865 Firmware: before msngw.076.294 (fixed in msngw.076.294)
  • Lexmark b3340 Firmware: before mslbd.076.294 (fixed in mslbd.076.294)
  • Lexmark b3442 Firmware: before mslbd.076.294 (fixed in mslbd.076.294)
  • Lexmark c2240 Firmware: before cstzj.076.294 (fixed in cstzj.076.294)
  • Lexmark c2325 Firmware: before csnzj.076.294 (fixed in csnzj.076.294)
  • Lexmark c2326 Firmware: before cslbn.076.294 (fixed in cslbn.076.294)
  • Lexmark c2425 Firmware: before csnzj.076.294 (fixed in csnzj.076.294)
  • Lexmark c2535 Firmware: before csnzj.076.294 (fixed in csnzj.076.294)
  • Lexmark c3224 Firmware: before cslbl.076.294 (fixed in cslbl.076.294)
  • Lexmark c3326 Firmware: before cslbl.076.294 (fixed in cslbl.076.294)
  • Lexmark c3426 Firmware: before cslbn.076.294 (fixed in cslbn.076.294)
  • Lexmark c4150 Firmware: before cstat.076.294 (fixed in cstat.076.294)
  • Lexmark c6160 Firmware: before cstpp.076.294 (fixed in cstpp.076.294)
  • Lexmark c9235 Firmware: before cstmh.076.294 (fixed in cstmh.076.294)
  • Lexmark CS331 Firmware: before cslbl.076.294 (fixed in cslbl.076.294)
  • Lexmark CS421 Firmware: before csnzj.076.294 (fixed in csnzj.076.294)
  • Lexmark CS431 Firmware: before cslbn.076.294 (fixed in cslbn.076.294)
  • Lexmark CS439 Firmware: before cslbn.076.294 (fixed in cslbn.076.294)
  • Lexmark CS521 Firmware: before csnzj.076.294 (fixed in csnzj.076.294)
  • Lexmark CS622 Firmware: before cstzj.076.294 (fixed in cstzj.076.294)
  • and 93 more

Published 2022-01-20. Last modified 2026-06-17.