PT-2022-12213 · Lexmark · Lexmark Devices

David Berard + 5 · Published 2022-01-20 · Updated 2023-07-24 · CVE-2021-44735

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Lexmark devices (affected versions not specified)

Description The issue is related to an embedded web server command injection vulnerability. This vulnerability was identified in Lexmark devices through 2021-12-07. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2021-44735

ZDI-22-326

ZDI-22-329

ZDI-22-330

Affected Products

Lexmark Devices

References · 9

• 🔥❌ https://github.com/defensor/CVE-2021-44735 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2021-44735 · Vendor Advisory
• https://support.lexmark.com/alerts · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-330 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-329 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-326 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-44735 · Security Note
• https://t.me/cibsecurity/35936 · Telegram Post
• https://t.me/cybersecuritytechnologies/8723 · Telegram Post