CVE Feed

    Dashboard / CVE / CVE-2023-23560

    CVE-2023-23560

    In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.

    Published:Jan 23, 2023
    Last Modified:Apr 2, 2025
    EPS:Jan 23, 2023
    EPSS Score:0.0089
    CVSS Score:9.8

    Affected Products

    Vendor
    Lexmark
    Product
    B2236
    Vendor
    Lexmark
    Product
    B2236 Firmware
    Vendor
    Lexmark
    Product
    B2338
    Vendor
    Lexmark
    Product
    B2338 Firmware
    Vendor
    Lexmark
    Product
    B2442
    Vendor
    Lexmark
    Product
    B2442 Firmware
    Vendor
    Lexmark
    Product
    B2546
    Vendor
    Lexmark
    Product
    B2546 Firmware
    Vendor
    Lexmark
    Product
    B2650
    Vendor
    Lexmark
    Product
    B2650 Firmware
    Vendor
    Lexmark
    Product
    B2865
    Vendor
    Lexmark
    Product
    B2865 Firmware
    Vendor
    Lexmark
    Product
    B3340
    Vendor
    Lexmark
    Product
    B3340 Firmware
    Vendor
    Lexmark
    Product
    B3442
    Vendor
    Lexmark
    Product
    B3442 Firmware
    Vendor
    Lexmark
    Product
    C2240
    Vendor
    Lexmark
    Product
    C2240 Firmware
    Vendor
    Lexmark
    Product
    C2325
    Vendor
    Lexmark
    Product
    C2325 Firmware
    Vendor
    Lexmark
    Product
    C2326
    Vendor
    Lexmark
    Product
    C2326 Firmware
    Vendor
    Lexmark
    Product
    C2425
    Vendor
    Lexmark
    Product
    C2425 Firmware
    Vendor
    Lexmark
    Product
    C2535
    Vendor
    Lexmark
    Product
    C2535 Firmware
    Vendor
    Lexmark
    Product
    C3224
    Vendor
    Lexmark
    Product
    C3224 Firmware
    Vendor
    Lexmark
    Product
    C3326
    Vendor
    Lexmark
    Product
    C3326 Firmware
    Vendor
    Lexmark
    Product
    C3426
    Vendor
    Lexmark
    Product
    C3426 Firmware
    Vendor
    Lexmark
    Product
    C4150
    Vendor
    Lexmark
    Product
    C4150 Firmware
    Vendor
    Lexmark
    Product
    C6160
    Vendor
    Lexmark
    Product
    C6160 Firmware
    Vendor
    Lexmark
    Product
    C9235
    Vendor
    Lexmark
    Product
    C9235 Firmware
    Vendor
    Lexmark
    Product
    Cs331
    Vendor
    Lexmark
    Product
    Cs331 Firmware
    Vendor
    Lexmark
    Product
    Cs421
    Vendor
    Lexmark
    Product
    Cs421 Firmware
    Vendor
    Lexmark
    Product
    Cs431
    Vendor
    Lexmark
    Product
    Cs431 Firmware
    Vendor
    Lexmark
    Product
    Cs439
    Vendor
    Lexmark
    Product
    Cs439 Firmware
    Vendor
    Lexmark
    Product
    Cs521
    Vendor
    Lexmark
    Product
    Cs521 Firmware
    Vendor
    Lexmark
    Product
    Cs622
    Vendor
    Lexmark
    Product
    Cs622 Firmware
    Vendor
    Lexmark
    Product
    Cs720
    Vendor
    Lexmark
    Product
    Cs720 Firmware
    Vendor
    Lexmark
    Product
    Cs725
    Vendor
    Lexmark
    Product
    Cs725 Firmware
    Vendor
    Lexmark
    Product
    Cs727
    Vendor
    Lexmark
    Product
    Cs727 Firmware
    Vendor
    Lexmark
    Product
    Cs728
    Vendor
    Lexmark
    Product
    Cs728 Firmware
    Vendor
    Lexmark
    Product
    Cs820
    Vendor
    Lexmark
    Product
    Cs820 Firmware
    Vendor
    Lexmark
    Product
    Cs827
    Vendor
    Lexmark
    Product
    Cs827 Firmware
    Vendor
    Lexmark
    Product
    Cs921
    Vendor
    Lexmark
    Product
    Cs921 Firmware
    Vendor
    Lexmark
    Product
    Cs923
    Vendor
    Lexmark
    Product
    Cs923 Firmware
    Vendor
    Lexmark
    Product
    Cs927
    Vendor
    Lexmark
    Product
    Cs927 Firmware
    Vendor
    Lexmark
    Product
    Cx331
    Vendor
    Lexmark
    Product
    Cx331 Firmware
    Vendor
    Lexmark
    Product
    Cx421
    Vendor
    Lexmark
    Product
    Cx421 Firmware
    Vendor
    Lexmark
    Product
    Cx431
    Vendor
    Lexmark
    Product
    Cx431 Firmware
    Vendor
    Lexmark
    Product
    Cx522
    Vendor
    Lexmark
    Product
    Cx522 Firmware
    Vendor
    Lexmark
    Product
    Cx622
    Vendor
    Lexmark
    Product
    Cx622 Firmware
    Vendor
    Lexmark
    Product
    Cx625
    Vendor
    Lexmark
    Product
    Cx625 Firmware
    Vendor
    Lexmark
    Product
    Cx725
    Vendor
    Lexmark
    Product
    Cx725 Firmware
    Vendor
    Lexmark
    Product
    Cx727
    Vendor
    Lexmark
    Product
    Cx727 Firmware
    Vendor
    Lexmark
    Product
    Cx820
    Vendor
    Lexmark
    Product
    Cx820 Firmware
    Vendor
    Lexmark
    Product
    Cx825
    Vendor
    Lexmark
    Product
    Cx825 Firmware
    Vendor
    Lexmark
    Product
    Cx860
    Vendor
    Lexmark
    Product
    Cx860 Firmware
    Vendor
    Lexmark
    Product
    Cx920
    Vendor
    Lexmark
    Product
    Cx920 Firmware
    Vendor
    Lexmark
    Product
    Cx921
    Vendor
    Lexmark
    Product
    Cx921 Firmware
    Vendor
    Lexmark
    Product
    Cx922
    Vendor
    Lexmark
    Product
    Cx922 Firmware
    Vendor
    Lexmark
    Product
    Cx923
    Vendor
    Lexmark
    Product
    Cx923 Firmware
    Vendor
    Lexmark
    Product
    Cx924
    Vendor
    Lexmark
    Product
    Cx924 Firmware
    Vendor
    Lexmark
    Product
    Cx944
    Vendor
    Lexmark
    Product
    Cx944 Firmware
    Vendor
    Lexmark
    Product
    M1242
    Vendor
    Lexmark
    Product
    M1242 Firmware
    Vendor
    Lexmark
    Product
    M1246
    Vendor
    Lexmark
    Product
    M1246 Firmware
    Vendor
    Lexmark
    Product
    M1342
    Vendor
    Lexmark
    Product
    M1342 Firmware
    Vendor
    Lexmark
    Product
    M3250
    Vendor
    Lexmark
    Product
    M3250 Firmware
    Vendor
    Lexmark
    Product
    M5255
    Vendor
    Lexmark
    Product
    M5255 Firmware
    Vendor
    Lexmark
    Product
    M5270
    Vendor
    Lexmark
    Product
    M5270 Firmware
    Vendor
    Lexmark
    Product
    Mb2236
    Vendor
    Lexmark
    Product
    Mb2236 Firmware
    Vendor
    Lexmark
    Product
    Mb2338
    Vendor
    Lexmark
    Product
    Mb2338 Firmware
    Vendor
    Lexmark
    Product
    Mb2442
    Vendor
    Lexmark
    Product
    Mb2442 Firmware
    Vendor
    Lexmark
    Product
    Mb2546
    Vendor
    Lexmark
    Product
    Mb2546 Firmware
    Vendor
    Lexmark
    Product
    Mb2650
    Vendor
    Lexmark
    Product
    Mb2650 Firmware
    Vendor
    Lexmark
    Product
    Mb2770
    Vendor
    Lexmark
    Product
    Mb2770 Firmware
    Vendor
    Lexmark
    Product
    Mb3442
    Vendor
    Lexmark
    Product
    Mb3442 Firmware
    Vendor
    Lexmark
    Product
    Mc2325
    Vendor
    Lexmark
    Product
    Mc2325 Firmware
    Vendor
    Lexmark
    Product
    Mc2425
    Vendor
    Lexmark
    Product
    Mc2425 Firmware
    Vendor
    Lexmark
    Product
    Mc2535
    Vendor
    Lexmark
    Product
    Mc2535 Firmware
    Vendor
    Lexmark
    Product
    Mc2640
    Vendor
    Lexmark
    Product
    Mc2640 Firmware
    Vendor
    Lexmark
    Product
    Mc3224
    Vendor
    Lexmark
    Product
    Mc3224 Firmware
    Vendor
    Lexmark
    Product
    Mc3326
    Vendor
    Lexmark
    Product
    Mc3326 Firmware
    Vendor
    Lexmark
    Product
    Mc3426
    Vendor
    Lexmark
    Product
    Mc3426 Firmware
    Vendor
    Lexmark
    Product
    Ms321
    Vendor
    Lexmark
    Product
    Ms321 Firmware
    Vendor
    Lexmark
    Product
    Ms331
    Vendor
    Lexmark
    Product
    Ms331 Firmware
    Vendor
    Lexmark
    Product
    Ms421
    Vendor
    Lexmark
    Product
    Ms421 Firmware
    Vendor
    Lexmark
    Product
    Ms431
    Vendor
    Lexmark
    Product
    Ms431 Firmware
    Vendor
    Lexmark
    Product
    Ms521
    Vendor
    Lexmark
    Product
    Ms521 Firmware
    Vendor
    Lexmark
    Product
    Ms621
    Vendor
    Lexmark
    Product
    Ms621 Firmware
    Vendor
    Lexmark
    Product
    Ms622
    Vendor
    Lexmark
    Product
    Ms622 Firmware
    Vendor
    Lexmark
    Product
    Ms725
    Vendor
    Lexmark
    Product
    Ms725 Firmware
    Vendor
    Lexmark
    Product
    Ms821
    Vendor
    Lexmark
    Product
    Ms821 Firmware
    Vendor
    Lexmark
    Product
    Ms822
    Vendor
    Lexmark
    Product
    Ms822 Firmware
    Vendor
    Lexmark
    Product
    Ms823
    Vendor
    Lexmark
    Product
    Ms823 Firmware
    Vendor
    Lexmark
    Product
    Ms825
    Vendor
    Lexmark
    Product
    Ms825 Firmware
    Vendor
    Lexmark
    Product
    Ms826
    Vendor
    Lexmark
    Product
    Ms826 Firmware
    Vendor
    Lexmark
    Product
    Mx321
    Vendor
    Lexmark
    Product
    Mx321 Firmware
    Vendor
    Lexmark
    Product
    Mx331
    Vendor
    Lexmark
    Product
    Mx331 Firmware
    Vendor
    Lexmark
    Product
    Mx421
    Vendor
    Lexmark
    Product
    Mx421 Firmware
    Vendor
    Lexmark
    Product
    Mx431
    Vendor
    Lexmark
    Product
    Mx431 Firmware
    Vendor
    Lexmark
    Product
    Mx432
    Vendor
    Lexmark
    Product
    Mx432 Firmware
    Vendor
    Lexmark
    Product
    Mx521
    Vendor
    Lexmark
    Product
    Mx521 Firmware
    Vendor
    Lexmark
    Product
    Mx522
    Vendor
    Lexmark
    Product
    Mx522 Firmware
    Vendor
    Lexmark
    Product
    Mx622
    Vendor
    Lexmark
    Product
    Mx622 Firmware
    Vendor
    Lexmark
    Product
    Mx721
    Vendor
    Lexmark
    Product
    Mx721 Firmware
    Vendor
    Lexmark
    Product
    Mx722
    Vendor
    Lexmark
    Product
    Mx722 Firmware
    Vendor
    Lexmark
    Product
    Mx822
    Vendor
    Lexmark
    Product
    Mx822 Firmware
    Vendor
    Lexmark
    Product
    Mx826
    Vendor
    Lexmark
    Product
    Mx826 Firmware
    Vendor
    Lexmark
    Product
    Mx931
    Vendor
    Lexmark
    Product
    Mx931 Firmware
    Vendor
    Lexmark
    Product
    Xc2235
    Vendor
    Lexmark
    Product
    Xc2235 Firmware
    Vendor
    Lexmark
    Product
    Xc2326
    Vendor
    Lexmark
    Product
    Xc2326 Firmware
    Vendor
    Lexmark
    Product
    Xc4140
    Vendor
    Lexmark
    Product
    Xc4140 Firmware
    Vendor
    Lexmark
    Product
    Xc4143
    Vendor
    Lexmark
    Product
    Xc4143 Firmware
    Vendor
    Lexmark
    Product
    Xc4150
    Vendor
    Lexmark
    Product
    Xc4150 Firmware
    Vendor
    Lexmark
    Product
    Xc4153
    Vendor
    Lexmark
    Product
    Xc4153 Firmware
    Vendor
    Lexmark
    Product
    Xc4240
    Vendor
    Lexmark
    Product
    Xc4240 Firmware
    Vendor
    Lexmark
    Product
    Xc4342
    Vendor
    Lexmark
    Product
    Xc4342 Firmware
    Vendor
    Lexmark
    Product
    Xc4352
    Vendor
    Lexmark
    Product
    Xc4352 Firmware
    Vendor
    Lexmark
    Product
    Xc6152
    Vendor
    Lexmark
    Product
    Xc6152 Firmware
    Vendor
    Lexmark
    Product
    Xc6153
    Vendor
    Lexmark
    Product
    Xc6153 Firmware
    Vendor
    Lexmark
    Product
    Xc8155
    Vendor
    Lexmark
    Product
    Xc8155 Firmware
    Vendor
    Lexmark
    Product
    Xc8160
    Vendor
    Lexmark
    Product
    Xc8160 Firmware
    Vendor
    Lexmark
    Product
    Xc8163
    Vendor
    Lexmark
    Product
    Xc8163 Firmware
    Vendor
    Lexmark
    Product
    Xc9225
    Vendor
    Lexmark
    Product
    Xc9225 Firmware
    Vendor
    Lexmark
    Product
    Xc9235
    Vendor
    Lexmark
    Product
    Xc9235 Firmware
    Vendor
    Lexmark
    Product
    Xc9245
    Vendor
    Lexmark
    Product
    Xc9245 Firmware
    Vendor
    Lexmark
    Product
    Xc9255
    Vendor
    Lexmark
    Product
    Xc9255 Firmware
    Vendor
    Lexmark
    Product
    Xc9265
    Vendor
    Lexmark
    Product
    Xc9265 Firmware
    Vendor
    Lexmark
    Product
    Xc9335
    Vendor
    Lexmark
    Product
    Xc9335 Firmware
    Vendor
    Lexmark
    Product
    Xc9445
    Vendor
    Lexmark
    Product
    Xc9445 Firmware
    Vendor
    Lexmark
    Product
    Xc9455
    Vendor
    Lexmark
    Product
    Xc9455 Firmware
    Vendor
    Lexmark
    Product
    Xc9465
    Vendor
    Lexmark
    Product
    Xc9465 Firmware
    Vendor
    Lexmark
    Product
    Xm1242
    Vendor
    Lexmark
    Product
    Xm1242 Firmware
    Vendor
    Lexmark
    Product
    Xm1246
    Vendor
    Lexmark
    Product
    Xm1246 Firmware
    Vendor
    Lexmark
    Product
    Xm1342
    Vendor
    Lexmark
    Product
    Xm1342 Firmware
    Vendor
    Lexmark
    Product
    Xm3142
    Vendor
    Lexmark
    Product
    Xm3142 Firmware
    Vendor
    Lexmark
    Product
    Xm3250
    Vendor
    Lexmark
    Product
    Xm3250 Firmware
    Vendor
    Lexmark
    Product
    Xm5365
    Vendor
    Lexmark
    Product
    Xm5365 Firmware
    Vendor
    Lexmark
    Product
    Xm7355
    Vendor
    Lexmark
    Product
    Xm7355 Firmware
    Vendor
    Lexmark
    Product
    Xm7370
    Vendor
    Lexmark
    Product
    Xm7370 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-10 Buffer Overflow via Environment Variables
    CAPEC-101 Server Side Include (SSI) Injection
    CAPEC-104 Cross Zone Scripting
    CAPEC-108 Command Line Execution through SQL Injection
    CAPEC-109 Object Relational Mapping Injection
    CAPEC-110 SQL Injection through SOAP Parameter Tampering
    CAPEC-120 Double Encoding
    CAPEC-13 Subverting Environment Variable Values
    CAPEC-135 Format String Injection
    CAPEC-136 LDAP Injection
    CAPEC-14 Client-side Injection-induced Buffer Overflow
    CAPEC-153 Input Data Manipulation
    CAPEC-182 Flash Injection
    CAPEC-209 XSS Using MIME Type Mismatch
    CAPEC-22 Exploiting Trust in Client
    CAPEC-23 File Content Injection
    CAPEC-230 Serialized Data with Nested Payloads
    CAPEC-231 Oversized Serialized Data Payloads
    CAPEC-24 Filter Failure through Buffer Overflow
    CAPEC-250 XML Injection
    CAPEC-261 Fuzzing for garnering other adjacent user/sensitive data
    CAPEC-267 Leverage Alternate Encoding
    CAPEC-28 Fuzzing
    CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
    CAPEC-31 Accessing/Intercepting/Modifying HTTP Cookies
    CAPEC-42 MIME Conversion
    CAPEC-43 Exploiting Multiple Input Interpretation Layers
    CAPEC-45 Buffer Overflow via Symbolic Links
    CAPEC-46 Overflow Variables and Tags
    CAPEC-47 Buffer Overflow via Parameter Expansion
    CAPEC-473 Signature Spoof
    CAPEC-52 Embedding NULL Bytes
    CAPEC-53 Postfix, Null Terminate, and Backslash
    CAPEC-588 DOM-Based XSS
    CAPEC-63 Cross-Site Scripting (XSS)
    CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic
    CAPEC-664 Server Side Request Forgery
    CAPEC-67 String Format Overflow in syslog()
    CAPEC-7 Blind SQL Injection
    CAPEC-71 Using Unicode Encoding to Bypass Validation Logic
    CAPEC-72 URL Encoding
    CAPEC-73 User-Controlled Filename
    CAPEC-78 Using Escaped Slashes in Alternate Encoding
    CAPEC-79 Using Slashes in Alternate Encoding
    CAPEC-8 Buffer Overflow in an API Call
    CAPEC-80 Using UTF-8 Encoding to Bypass Validation Logic
    CAPEC-81 Web Server Logs Tampering
    CAPEC-83 XPath Injection
    CAPEC-85 AJAX Footprinting
    CAPEC-88 OS Command Injection
    CAPEC-9 Buffer Overflow in Local Command-Line Utilities

    Related CVEs

    CVE-2023-26068 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).…
    CVE-2023-26067 (CVSS 8.1) — Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).…
    CVE-2023-26064 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.…
    CVE-2023-26065 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 have an Integer Overflow.…
    CVE-2023-26066 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.…
    CVE-2023-26069 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4).…
    CVE-2023-26070 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).…
    CVE-2023-26063 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.…
    CVE-2023-22960 (CVSS 7.5) — Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency.…
    CVE-2022-29850 (CVSS 8.1) — Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High