Lexmark Printer Firmware vulnerabilities

4 CVEs affecting Lexmark Printer Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-50739, published 2025-01-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-1896, published 2016-01-27. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to…
CVE-2023-50739, published 2025-01-18. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
CVE-2016-3145, published 2016-04-22. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows…
CVE-2023-50738, published 2025-01-17. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified.