CVEvulnerability

CVE-2016-3145

4.6 MEDIUM Published 2016-04-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-04-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.6 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on non-volatile memory.

Affected configurations

• lexmark printer firmware (>= pp <= pp.021.062) • lexmark printer firmware (>= cb <= cb.021.062) • lexmark printer firmware (>= yk <= yk.021.062) • lexmark printer firmware (>= yk <= yk.021.057) • lexmark printer firmware (>= atl <= atl.021.062)

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References