PT-2022-16995 · Lexmark · Lexmark

CVE-2022-24935 · Published 2022-04-28 · Updated 2023-08-08

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Lexmark products through 2022-02-10

Description The issue is related to Incorrect Access Control in Lexmark products.

Recommendations For Lexmark products through 2022-02-10, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2022-24935

ZDI-22-1038

Affected Products

Lexmark

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-24935 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-1038 · Security Note
• https://osv.dev/vulnerability/CVE-2022-24935 · Vendor Advisory
• https://lexmark.com · Vendor Advisory
• https://publications.lexmark.com/publications/security-alerts/CVE-2022-24935.pdf · Vendor Advisory
• https://t.me/cibsecurity/41567 · Telegram Post