CVE-2021-44735: Lexmark b2236 Firmware
Critical severity, CVSS 9.8. EPSS: 7% chance of exploitation in the next 30 days.
Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.
Affected products
- Lexmark b2236 Firmware: before mslsg.076.294 (fixed in mslsg.076.294)
- Lexmark b2338 Firmware: before msngm.076.294 (fixed in msngm.076.294)
- Lexmark b2442 Firmware: before msngm.076.294 (fixed in msngm.076.294)
- Lexmark b2546 Firmware: before msngm.076.294 (fixed in msngm.076.294)
- Lexmark b2650 Firmware: before msngm.076.294 (fixed in msngm.076.294)
- Lexmark b2865 Firmware: before msngw.076.294 (fixed in msngw.076.294)
- Lexmark b3340 Firmware: before mslbd.076.294 (fixed in mslbd.076.294)
- Lexmark b3442 Firmware: before mslbd.076.294 (fixed in mslbd.076.294)
- Lexmark c2240 Firmware: before cstzj.076.294 (fixed in cstzj.076.294)
- Lexmark c2325 Firmware: before csnzj.076.294 (fixed in csnzj.076.294)
- Lexmark c2326 Firmware: before cslbn.076.294 (fixed in cslbn.076.294)
- Lexmark c2425 Firmware: before csnzj.076.294 (fixed in csnzj.076.294)
- Lexmark c2535 Firmware: before csnzj.076.294 (fixed in csnzj.076.294)
- Lexmark c3224 Firmware: before cslbl.076.294 (fixed in cslbl.076.294)
- Lexmark c3326 Firmware: before cslbl.076.294 (fixed in cslbl.076.294)
- Lexmark c3426 Firmware: before cslbn.076.294 (fixed in cslbn.076.294)
- Lexmark c4150 Firmware: before cstat.076.294 (fixed in cstat.076.294)
- Lexmark c6160 Firmware: before cstpp.076.294 (fixed in cstpp.076.294)
- Lexmark c9235 Firmware: before cstmh.076.294 (fixed in cstmh.076.294)
- Lexmark CS331 Firmware: before cslbl.076.294 (fixed in cslbl.076.294)
- Lexmark CS421 Firmware: before csnzj.076.294 (fixed in csnzj.076.294)
- Lexmark CS431 Firmware: before cslbn.076.294 (fixed in cslbn.076.294)
- Lexmark CS439 Firmware: before cslbn.076.294 (fixed in cslbn.076.294)
- Lexmark CS521 Firmware: before csnzj.076.294 (fixed in csnzj.076.294)
- Lexmark CS622 Firmware: before cstzj.076.294 (fixed in cstzj.076.294)
- and 93 more
Published 2022-01-20. Last modified 2026-06-17.