CVE Feed

    Dashboard / CVE / CVE-2023-40239

    CVE-2023-40239

    Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80.*.P246, i.e., '*' indicates that the full version specification varies across product model family, but firmware level P246 (or higher) is required to remediate the vulnerability.

    Published:Sep 1, 2023
    Last Modified:Nov 21, 2024
    EPS:Sep 1, 2023
    EPSS Score:0.00179
    CVSS Score:7.5

    Affected Products

    Vendor
    Lexmark
    Product
    C2132
    Vendor
    Lexmark
    Product
    C2132 Firmware
    Vendor
    Lexmark
    Product
    Cs310
    Vendor
    Lexmark
    Product
    Cs310 Firmware
    Vendor
    Lexmark
    Product
    Cs317
    Vendor
    Lexmark
    Product
    Cs317 Firmware
    Vendor
    Lexmark
    Product
    Cs410
    Vendor
    Lexmark
    Product
    Cs410 Firmware
    Vendor
    Lexmark
    Product
    Cs417
    Vendor
    Lexmark
    Product
    Cs417 Firmware
    Vendor
    Lexmark
    Product
    Cs510
    Vendor
    Lexmark
    Product
    Cs510 Firmware
    Vendor
    Lexmark
    Product
    Cs517
    Vendor
    Lexmark
    Product
    Cs517 Firmware
    Vendor
    Lexmark
    Product
    Cx310
    Vendor
    Lexmark
    Product
    Cx310 Firmware
    Vendor
    Lexmark
    Product
    Cx317
    Vendor
    Lexmark
    Product
    Cx317 Firmware
    Vendor
    Lexmark
    Product
    Cx410
    Vendor
    Lexmark
    Product
    Cx410 Firmware
    Vendor
    Lexmark
    Product
    Cx417
    Vendor
    Lexmark
    Product
    Cx417 Firmware
    Vendor
    Lexmark
    Product
    Cx510
    Vendor
    Lexmark
    Product
    Cx510 Firmware
    Vendor
    Lexmark
    Product
    Cx517
    Vendor
    Lexmark
    Product
    Cx517 Firmware
    Vendor
    Lexmark
    Product
    M1140
    Vendor
    Lexmark
    Product
    M1140\+
    Vendor
    Lexmark
    Product
    M1140\+ Firmware
    Vendor
    Lexmark
    Product
    M1140 Firmware
    Vendor
    Lexmark
    Product
    M1145
    Vendor
    Lexmark
    Product
    M1145 Firmware
    Vendor
    Lexmark
    Product
    M3150de
    Vendor
    Lexmark
    Product
    M3150de Firmware
    Vendor
    Lexmark
    Product
    M3150dn
    Vendor
    Lexmark
    Product
    M3150dn Firmware
    Vendor
    Lexmark
    Product
    M5155
    Vendor
    Lexmark
    Product
    M5155 Firmware
    Vendor
    Lexmark
    Product
    M5163de
    Vendor
    Lexmark
    Product
    M5163de Firmware
    Vendor
    Lexmark
    Product
    M5163dn
    Vendor
    Lexmark
    Product
    M5163dn Firmware
    Vendor
    Lexmark
    Product
    M5170
    Vendor
    Lexmark
    Product
    M5170 Firmware
    Vendor
    Lexmark
    Product
    Ms310
    Vendor
    Lexmark
    Product
    Ms310 Firmware
    Vendor
    Lexmark
    Product
    Ms312
    Vendor
    Lexmark
    Product
    Ms312 Firmware
    Vendor
    Lexmark
    Product
    Ms315
    Vendor
    Lexmark
    Product
    Ms315 Firmware
    Vendor
    Lexmark
    Product
    Ms317
    Vendor
    Lexmark
    Product
    Ms317 Firmware
    Vendor
    Lexmark
    Product
    Ms410
    Vendor
    Lexmark
    Product
    Ms410 Firmware
    Vendor
    Lexmark
    Product
    Ms415
    Vendor
    Lexmark
    Product
    Ms415 Firmware
    Vendor
    Lexmark
    Product
    Ms417
    Vendor
    Lexmark
    Product
    Ms417 Firmware
    Vendor
    Lexmark
    Product
    Ms510
    Vendor
    Lexmark
    Product
    Ms510 Firmware
    Vendor
    Lexmark
    Product
    Ms517
    Vendor
    Lexmark
    Product
    Ms517 Firmware
    Vendor
    Lexmark
    Product
    Ms610de
    Vendor
    Lexmark
    Product
    Ms610de Firmware
    Vendor
    Lexmark
    Product
    Ms610dn
    Vendor
    Lexmark
    Product
    Ms610dn Firmware
    Vendor
    Lexmark
    Product
    Ms617
    Vendor
    Lexmark
    Product
    Ms617 Firmware
    Vendor
    Lexmark
    Product
    Ms710
    Vendor
    Lexmark
    Product
    Ms710 Firmware
    Vendor
    Lexmark
    Product
    Ms711
    Vendor
    Lexmark
    Product
    Ms711 Firmware
    Vendor
    Lexmark
    Product
    Ms810de
    Vendor
    Lexmark
    Product
    Ms810de Firmware
    Vendor
    Lexmark
    Product
    Ms810dn
    Vendor
    Lexmark
    Product
    Ms810dn Firmware
    Vendor
    Lexmark
    Product
    Ms811
    Vendor
    Lexmark
    Product
    Ms811 Firmware
    Vendor
    Lexmark
    Product
    Ms812de
    Vendor
    Lexmark
    Product
    Ms812de Firmware
    Vendor
    Lexmark
    Product
    Ms812dn
    Vendor
    Lexmark
    Product
    Ms812dn Firmware
    Vendor
    Lexmark
    Product
    Ms817
    Vendor
    Lexmark
    Product
    Ms817 Firmware
    Vendor
    Lexmark
    Product
    Ms818
    Vendor
    Lexmark
    Product
    Ms818 Firmware
    Vendor
    Lexmark
    Product
    Ms911
    Vendor
    Lexmark
    Product
    Ms911 Firmware
    Vendor
    Lexmark
    Product
    Mx310
    Vendor
    Lexmark
    Product
    Mx310 Firmware
    Vendor
    Lexmark
    Product
    Mx317
    Vendor
    Lexmark
    Product
    Mx317 Firmware
    Vendor
    Lexmark
    Product
    Mx410
    Vendor
    Lexmark
    Product
    Mx410 Firmware
    Vendor
    Lexmark
    Product
    Mx417
    Vendor
    Lexmark
    Product
    Mx417 Firmware
    Vendor
    Lexmark
    Product
    Mx510
    Vendor
    Lexmark
    Product
    Mx510 Firmware
    Vendor
    Lexmark
    Product
    Mx511
    Vendor
    Lexmark
    Product
    Mx511 Firmware
    Vendor
    Lexmark
    Product
    Mx517
    Vendor
    Lexmark
    Product
    Mx517 Firmware
    Vendor
    Lexmark
    Product
    Mx610
    Vendor
    Lexmark
    Product
    Mx610 Firmware
    Vendor
    Lexmark
    Product
    Mx611
    Vendor
    Lexmark
    Product
    Mx611 Firmware
    Vendor
    Lexmark
    Product
    Mx617
    Vendor
    Lexmark
    Product
    Mx617 Firmware
    Vendor
    Lexmark
    Product
    Mx710
    Vendor
    Lexmark
    Product
    Mx710 Firmware
    Vendor
    Lexmark
    Product
    Mx711
    Vendor
    Lexmark
    Product
    Mx711 Firmware
    Vendor
    Lexmark
    Product
    Mx717
    Vendor
    Lexmark
    Product
    Mx717 Firmware
    Vendor
    Lexmark
    Product
    Mx718
    Vendor
    Lexmark
    Product
    Mx718 Firmware
    Vendor
    Lexmark
    Product
    Mx810
    Vendor
    Lexmark
    Product
    Mx810 Firmware
    Vendor
    Lexmark
    Product
    Mx811
    Vendor
    Lexmark
    Product
    Mx811 Firmware
    Vendor
    Lexmark
    Product
    Mx812
    Vendor
    Lexmark
    Product
    Mx812 Firmware
    Vendor
    Lexmark
    Product
    Mx910
    Vendor
    Lexmark
    Product
    Mx910 Firmware
    Vendor
    Lexmark
    Product
    Mx911
    Vendor
    Lexmark
    Product
    Mx911 Firmware
    Vendor
    Lexmark
    Product
    Mx912
    Vendor
    Lexmark
    Product
    Mx912 Firmware
    Vendor
    Lexmark
    Product
    Xc2130
    Vendor
    Lexmark
    Product
    Xc2130 Firmware
    Vendor
    Lexmark
    Product
    Xc2132
    Vendor
    Lexmark
    Product
    Xc2132 Firmware
    Vendor
    Lexmark
    Product
    Xm1135
    Vendor
    Lexmark
    Product
    Xm1135 Firmware
    Vendor
    Lexmark
    Product
    Xm1140
    Vendor
    Lexmark
    Product
    Xm1140 Firmware
    Vendor
    Lexmark
    Product
    Xm1145
    Vendor
    Lexmark
    Product
    Xm1145 Firmware
    Vendor
    Lexmark
    Product
    Xm3150
    Vendor
    Lexmark
    Product
    Xm3150 Firmware
    Vendor
    Lexmark
    Product
    Xm5163
    Vendor
    Lexmark
    Product
    Xm5163 Firmware
    Vendor
    Lexmark
    Product
    Xm5170
    Vendor
    Lexmark
    Product
    Xm5170 Firmware
    Vendor
    Lexmark
    Product
    Xm5263
    Vendor
    Lexmark
    Product
    Xm5263 Firmware
    Vendor
    Lexmark
    Product
    Xm5270
    Vendor
    Lexmark
    Product
    Xm5270 Firmware
    Vendor
    Lexmark
    Product
    Xm7155
    Vendor
    Lexmark
    Product
    Xm7155 Firmware
    Vendor
    Lexmark
    Product
    Xm7163
    Vendor
    Lexmark
    Product
    Xm7163 Firmware
    Vendor
    Lexmark
    Product
    Xm7170
    Vendor
    Lexmark
    Product
    Xm7170 Firmware
    Vendor
    Lexmark
    Product
    Xm7263
    Vendor
    Lexmark
    Product
    Xm7263 Firmware
    Vendor
    Lexmark
    Product
    Xm7270
    Vendor
    Lexmark
    Product
    Xm7270 Firmware
    Vendor
    Lexmark
    Product
    Xm9145
    Vendor
    Lexmark
    Product
    Xm9145 Firmware
    Vendor
    Lexmark
    Product
    Xm9155
    Vendor
    Lexmark
    Product
    Xm9155 Firmware
    Vendor
    Lexmark
    Product
    Xm9165
    Vendor
    Lexmark
    Product
    Xm9165 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-221 Data Serialization External Entities Blowup

    Related CVEs

    CVE-2023-26065 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 have an Integer Overflow.…
    CVE-2023-26066 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index.…
    CVE-2023-26070 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4).…
    CVE-2023-26063 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type.…
    CVE-2023-26064 (CVSS 9.8) — Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write.…
    CVE-2021-44734 (CVSS 9.8) — Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which ca…
    CVE-2021-44737 (CVSS 8.8) — PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite…
    CVE-2021-44738 (CVSS 9.8) — Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpre…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High