CVE-2023-23560: Lexmark b2236 Firmware

Critical severity, CVSS 9.8. EPSS: 13.9% chance of exploitation in the next 30 days.

In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.

Affected products

  • Lexmark b2236 Firmware: before mslsg.081.234 (fixed in mslsg.081.234)
  • Lexmark b2338 Firmware: before msngm.081.234 (fixed in msngm.081.234)
  • Lexmark b2442 Firmware: before msngm.081.234 (fixed in msngm.081.234)
  • Lexmark b2546 Firmware: before msngm.081.234 (fixed in msngm.081.234)
  • Lexmark b2650 Firmware: before msngm.081.234 (fixed in msngm.081.234)
  • Lexmark b2865 Firmware: before msngw.081.234 (fixed in msngw.081.234)
  • Lexmark b3340 Firmware: before mslbd.081.234 (fixed in mslbd.081.234)
  • Lexmark b3442 Firmware: before mslbd.081.234 (fixed in mslbd.081.234)
  • Lexmark c2240 Firmware: before cstzj.081.234 (fixed in cstzj.081.234)
  • Lexmark c2325 Firmware: before csnzj.081.234 (fixed in csnzj.081.234)
  • Lexmark c2326 Firmware: before cslbn.081.234 (fixed in cslbn.081.234)
  • Lexmark c2425 Firmware: before csnzj.081.234 (fixed in csnzj.081.234)
  • Lexmark c2535 Firmware: before csnzj.081.234 (fixed in csnzj.081.234)
  • Lexmark c3224 Firmware: before cslbl.081.234 (fixed in cslbl.081.234)
  • Lexmark c3326 Firmware: before cslbl.081.234 (fixed in cslbl.081.234)
  • Lexmark c3426 Firmware: before cslbn.081.234 (fixed in cslbn.081.234)
  • Lexmark c4150 Firmware: before cstat.081.234 (fixed in cstat.081.234)
  • Lexmark c6160 Firmware: before cstpp.081.234 (fixed in cstpp.081.234)
  • Lexmark c9235 Firmware: before cstmh.081.234 (fixed in cstmh.081.234)
  • Lexmark CS331 Firmware: before cslbl.081.234 (fixed in cslbl.081.234)
  • Lexmark CS421 Firmware: before csnzj.081.234 (fixed in csnzj.081.234)
  • Lexmark CS431 Firmware: before cslbn.081.234 (fixed in cslbn.081.234)
  • Lexmark CS439 Firmware: before cslbn.081.234 (fixed in cslbn.081.234)
  • Lexmark CS521 Firmware: before csnzj.081.234 (fixed in csnzj.081.234)
  • Lexmark CS622 Firmware: before cstzj.081.234 (fixed in cstzj.081.234)
  • and 103 more

Published 2023-01-23. Last modified 2026-06-17.