CVE Feed

    Dashboard / CVE / CVE-2023-26067

    CVE-2023-26067

    Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4).

    Published:Apr 10, 2023
    Last Modified:Feb 11, 2025
    EPS:Apr 10, 2023
    EPSS Score:0.91931
    CVSS Score:8.1

    Affected Products

    Vendor
    Lexmark
    Product
    B2236
    Vendor
    Lexmark
    Product
    B2338
    Vendor
    Lexmark
    Product
    B2442
    Vendor
    Lexmark
    Product
    B2546
    Vendor
    Lexmark
    Product
    B2650
    Vendor
    Lexmark
    Product
    B2865
    Vendor
    Lexmark
    Product
    B3340
    Vendor
    Lexmark
    Product
    B3442
    Vendor
    Lexmark
    Product
    C2325
    Vendor
    Lexmark
    Product
    C2326
    Vendor
    Lexmark
    Product
    C2425
    Vendor
    Lexmark
    Product
    C2535
    Vendor
    Lexmark
    Product
    C3224
    Vendor
    Lexmark
    Product
    C3326
    Vendor
    Lexmark
    Product
    C3426
    Vendor
    Lexmark
    Product
    C4150
    Vendor
    Lexmark
    Product
    C6160
    Vendor
    Lexmark
    Product
    C923
    Vendor
    Lexmark
    Product
    Cs331
    Vendor
    Lexmark
    Product
    Cs421
    Vendor
    Lexmark
    Product
    Cs431
    Vendor
    Lexmark
    Product
    Cs439
    Vendor
    Lexmark
    Product
    Cs521
    Vendor
    Lexmark
    Product
    Cs720
    Vendor
    Lexmark
    Product
    Cs725
    Vendor
    Lexmark
    Product
    Cs727
    Vendor
    Lexmark
    Product
    Cs728
    Vendor
    Lexmark
    Product
    Cs820
    Vendor
    Lexmark
    Product
    Cs827
    Vendor
    Lexmark
    Product
    Cs921
    Vendor
    Lexmark
    Product
    Cs923
    Vendor
    Lexmark
    Product
    Cs927
    Vendor
    Lexmark
    Product
    Cs943
    Vendor
    Lexmark
    Product
    Cslbl Firmware
    Vendor
    Lexmark
    Product
    Cslbn Firmware
    Vendor
    Lexmark
    Product
    Csnzj Firmware
    Vendor
    Lexmark
    Product
    Cstat Firmware
    Vendor
    Lexmark
    Product
    Cstmh Firmware
    Vendor
    Lexmark
    Product
    Cstpc Firmware
    Vendor
    Lexmark
    Product
    Cx421
    Vendor
    Lexmark
    Product
    Cx431
    Vendor
    Lexmark
    Product
    Cx522
    Vendor
    Lexmark
    Product
    Cx622
    Vendor
    Lexmark
    Product
    Cx625
    Vendor
    Lexmark
    Product
    Cx725
    Vendor
    Lexmark
    Product
    Cx727
    Vendor
    Lexmark
    Product
    Cx730
    Vendor
    Lexmark
    Product
    Cx735
    Vendor
    Lexmark
    Product
    Cx820
    Vendor
    Lexmark
    Product
    Cx825
    Vendor
    Lexmark
    Product
    Cx827
    Vendor
    Lexmark
    Product
    Cx86
    Vendor
    Lexmark
    Product
    Cx920
    Vendor
    Lexmark
    Product
    Cx921
    Vendor
    Lexmark
    Product
    Cx922
    Vendor
    Lexmark
    Product
    Cx923
    Vendor
    Lexmark
    Product
    Cx924
    Vendor
    Lexmark
    Product
    Cx930
    Vendor
    Lexmark
    Product
    Cx931
    Vendor
    Lexmark
    Product
    Cx942
    Vendor
    Lexmark
    Product
    Cx943
    Vendor
    Lexmark
    Product
    Cx944
    Vendor
    Lexmark
    Product
    Cxlbl Firmware
    Vendor
    Lexmark
    Product
    Cxlbn Firmware
    Vendor
    Lexmark
    Product
    Cxnzj Firmware
    Vendor
    Lexmark
    Product
    Cxtat Firmware
    Vendor
    Lexmark
    Product
    Cxtmm Firmware
    Vendor
    Lexmark
    Product
    Cxtpc Firmware
    Vendor
    Lexmark
    Product
    Cxtpp Firmware
    Vendor
    Lexmark
    Product
    Cxtzj Firmware
    Vendor
    Lexmark
    Product
    M1242
    Vendor
    Lexmark
    Product
    M1246
    Vendor
    Lexmark
    Product
    M1342
    Vendor
    Lexmark
    Product
    M3250
    Vendor
    Lexmark
    Product
    M5255
    Vendor
    Lexmark
    Product
    M5270
    Vendor
    Lexmark
    Product
    Mb2236
    Vendor
    Lexmark
    Product
    Mb2338
    Vendor
    Lexmark
    Product
    Mb2442
    Vendor
    Lexmark
    Product
    Mb2546
    Vendor
    Lexmark
    Product
    Mb2650
    Vendor
    Lexmark
    Product
    Mb2770
    Vendor
    Lexmark
    Product
    Mb3442
    Vendor
    Lexmark
    Product
    Mc2325
    Vendor
    Lexmark
    Product
    Mc2425
    Vendor
    Lexmark
    Product
    Mc2535
    Vendor
    Lexmark
    Product
    Mc2640
    Vendor
    Lexmark
    Product
    Mc3224
    Vendor
    Lexmark
    Product
    Mc3326
    Vendor
    Lexmark
    Product
    Mc3426
    Vendor
    Lexmark
    Product
    Ms321
    Vendor
    Lexmark
    Product
    Ms331
    Vendor
    Lexmark
    Product
    Ms421
    Vendor
    Lexmark
    Product
    Ms431
    Vendor
    Lexmark
    Product
    Ms439
    Vendor
    Lexmark
    Product
    Ms521
    Vendor
    Lexmark
    Product
    Ms621
    Vendor
    Lexmark
    Product
    Ms622
    Vendor
    Lexmark
    Product
    Ms725
    Vendor
    Lexmark
    Product
    Ms821
    Vendor
    Lexmark
    Product
    Ms822
    Vendor
    Lexmark
    Product
    Ms823
    Vendor
    Lexmark
    Product
    Ms825
    Vendor
    Lexmark
    Product
    Ms826
    Vendor
    Lexmark
    Product
    Mslbd Firmware
    Vendor
    Lexmark
    Product
    Mslsg Firmware
    Vendor
    Lexmark
    Product
    Msngm Firmware
    Vendor
    Lexmark
    Product
    Msngw Firmware
    Vendor
    Lexmark
    Product
    Mstgw Firmware
    Vendor
    Lexmark
    Product
    Mx321
    Vendor
    Lexmark
    Product
    Mx331
    Vendor
    Lexmark
    Product
    Mx421
    Vendor
    Lexmark
    Product
    Mx431
    Vendor
    Lexmark
    Product
    Mx432
    Vendor
    Lexmark
    Product
    Mx521
    Vendor
    Lexmark
    Product
    Mx522
    Vendor
    Lexmark
    Product
    Mx622
    Vendor
    Lexmark
    Product
    Mx721
    Vendor
    Lexmark
    Product
    Mx722
    Vendor
    Lexmark
    Product
    Mx725
    Vendor
    Lexmark
    Product
    Mx822
    Vendor
    Lexmark
    Product
    Mx826
    Vendor
    Lexmark
    Product
    Mx931
    Vendor
    Lexmark
    Product
    Mxlbd Firmware
    Vendor
    Lexmark
    Product
    Mxlsg Firmware
    Vendor
    Lexmark
    Product
    Mxngm Firmware
    Vendor
    Lexmark
    Product
    Mxtct Firmware
    Vendor
    Lexmark
    Product
    Mxtgm Firmware
    Vendor
    Lexmark
    Product
    Mxtgw Firmware
    Vendor
    Lexmark
    Product
    Mxtpm Firmware
    Vendor
    Lexmark
    Product
    Xc2235
    Vendor
    Lexmark
    Product
    Xc2326
    Vendor
    Lexmark
    Product
    Xc4140
    Vendor
    Lexmark
    Product
    Xc4143
    Vendor
    Lexmark
    Product
    Xc4150
    Vendor
    Lexmark
    Product
    Xc4153
    Vendor
    Lexmark
    Product
    Xc4240
    Vendor
    Lexmark
    Product
    Xc4342
    Vendor
    Lexmark
    Product
    Xc4352
    Vendor
    Lexmark
    Product
    Xc6152
    Vendor
    Lexmark
    Product
    Xc6153
    Vendor
    Lexmark
    Product
    Xc8155
    Vendor
    Lexmark
    Product
    Xc8160
    Vendor
    Lexmark
    Product
    Xc8163
    Vendor
    Lexmark
    Product
    Xc9225
    Vendor
    Lexmark
    Product
    Xc9235
    Vendor
    Lexmark
    Product
    Xc9245
    Vendor
    Lexmark
    Product
    Xc9255
    Vendor
    Lexmark
    Product
    Xc9265
    Vendor
    Lexmark
    Product
    Xc9325
    Vendor
    Lexmark
    Product
    Xc9335
    Vendor
    Lexmark
    Product
    Xc9445
    Vendor
    Lexmark
    Product
    Xc9455
    Vendor
    Lexmark
    Product
    Xc9465
    Vendor
    Lexmark
    Product
    Xm1242
    Vendor
    Lexmark
    Product
    Xm1246
    Vendor
    Lexmark
    Product
    Xm1342
    Vendor
    Lexmark
    Product
    Xm3142
    Vendor
    Lexmark
    Product
    Xm3250
    Vendor
    Lexmark
    Product
    Xm5365
    Vendor
    Lexmark
    Product
    Xm5370
    Vendor
    Lexmark
    Product
    Xm7355
    Vendor
    Lexmark
    Product
    Xm7370

    Exploits

    https://github.com/horizon3ai/CVE-2023-26067

    Common Weakness Enumeration

    CWE-20 Improper Input Validation

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-10 Buffer Overflow via Environment Variables
    CAPEC-101 Server Side Include (SSI) Injection
    CAPEC-104 Cross Zone Scripting
    CAPEC-108 Command Line Execution through SQL Injection
    CAPEC-109 Object Relational Mapping Injection
    CAPEC-110 SQL Injection through SOAP Parameter Tampering
    CAPEC-120 Double Encoding
    CAPEC-13 Subverting Environment Variable Values
    CAPEC-135 Format String Injection
    CAPEC-136 LDAP Injection
    CAPEC-14 Client-side Injection-induced Buffer Overflow
    CAPEC-153 Input Data Manipulation
    CAPEC-182 Flash Injection
    CAPEC-209 XSS Using MIME Type Mismatch
    CAPEC-22 Exploiting Trust in Client
    CAPEC-23 File Content Injection
    CAPEC-230 Serialized Data with Nested Payloads
    CAPEC-231 Oversized Serialized Data Payloads
    CAPEC-24 Filter Failure through Buffer Overflow
    CAPEC-250 XML Injection
    CAPEC-261 Fuzzing for garnering other adjacent user/sensitive data
    CAPEC-267 Leverage Alternate Encoding
    CAPEC-28 Fuzzing
    CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
    CAPEC-31 Accessing/Intercepting/Modifying HTTP Cookies
    CAPEC-42 MIME Conversion
    CAPEC-43 Exploiting Multiple Input Interpretation Layers
    CAPEC-45 Buffer Overflow via Symbolic Links
    CAPEC-46 Overflow Variables and Tags
    CAPEC-47 Buffer Overflow via Parameter Expansion
    CAPEC-473 Signature Spoof
    CAPEC-52 Embedding NULL Bytes
    CAPEC-53 Postfix, Null Terminate, and Backslash
    CAPEC-588 DOM-Based XSS
    CAPEC-63 Cross-Site Scripting (XSS)
    CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic
    CAPEC-664 Server Side Request Forgery
    CAPEC-67 String Format Overflow in syslog()
    CAPEC-7 Blind SQL Injection
    CAPEC-71 Using Unicode Encoding to Bypass Validation Logic
    CAPEC-72 URL Encoding
    CAPEC-73 User-Controlled Filename
    CAPEC-78 Using Escaped Slashes in Alternate Encoding
    CAPEC-79 Using Slashes in Alternate Encoding
    CAPEC-8 Buffer Overflow in an API Call
    CAPEC-80 Using UTF-8 Encoding to Bypass Validation Logic
    CAPEC-81 Web Server Logs Tampering
    CAPEC-83 XPath Injection
    CAPEC-85 AJAX Footprinting
    CAPEC-88 OS Command Injection
    CAPEC-9 Buffer Overflow in Local Command-Line Utilities

    Related CVEs

    CVE-2023-26068 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4).…
    CVE-2023-26064 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.…
    CVE-2023-26065 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 have an Integer Overflow.…
    CVE-2023-26066 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.…
    CVE-2023-26069 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4).…
    CVE-2023-26070 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).…
    CVE-2023-26063 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.…
    CVE-2023-22960 (CVSS 7.5) — Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency.…
    CVE-2023-23560 (CVSS 9.8) — In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.…
    CVE-2022-29850 (CVSS 8.1) — Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High