CVEvulnerability
CVE-2016-1896
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-01-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-254, CWE-264
Description
Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.
Affected configurations
• lexmark printer firmware (<= cb.02.048)
• lexmark printer firmware (<= atl.02.048)
• lexmark printer firmware (<= yk.02.048)
• lexmark printer firmware (<= pp.02.048)
Related
References
- http://support.lexmark.com/index?page=content&id=TE745 Vendor Advisory
- http://support.lexmark.com/index?page=content&id=TE745 Vendor Advisory