CVEvulnerability

CVE-2023-40239

7.5 HIGH Published 2023-09-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-09-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-611

Description

Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80.*.P246, i.e., '*' indicates that the full version specification varies across product model family, but firmware level P246 (or higher) is required to remediate the vulnerability.

Affected configurations

• lexmark c2132 firmware (<= lw80.vy4.p245) • lexmark cs310 firmware (<= lw80.vyl.p245) • lexmark cs317 firmware (<= lw80.vyl.p245) • lexmark cs410 firmware (<= lw80.vy2.p245) • lexmark cs417 firmware (<= lw80.vy2.p245) • lexmark cs510 firmware (<= lw80.vy4.p245) • lexmark cs517 firmware (<= lw80.vy4.p245) • lexmark cx310 firmware (<= lw80.gm2.p245) • lexmark cx317 firmware (<= lw80.gm2.p245) • lexmark cx410 firmware (<= lw80.gm4.p245) • lexmark cx417 firmware (<= lw80.gm4.p245) • lexmark cx510 firmware (<= lw80.gm7.p245) • lexmark cx517 firmware (<= lw80.gm7.p245) • lexmark m1140\+ firmware (<= lw80.pr2.p245) • lexmark m1140 firmware (<= lw80.prl.p245) • lexmark m1145 firmware (<= lw80.pr2.p245) • lexmark m3150de firmware (<= lw80.pr4.p245) • lexmark m3150dn firmware (<= lw80.pr2.p245) • lexmark m5155 firmware (<= lw80.dn4.p245) • lexmark m5163de firmware (<= lw80.dn4.p245) • lexmark m5163dn firmware (<= lw80.dn2.p245) • lexmark m5170 firmware (<= lw80.dn7.p245) • lexmark ms310 firmware (<= lw80.prl.p245) • lexmark ms312 firmware (<= lw80.prl.p245) • lexmark ms315 firmware (<= lw80.tl2.p245) • lexmark ms317 firmware (<= lw80.prl.p245) • lexmark ms410 firmware (<= lw80.prl.p245) • lexmark ms415 firmware (<= lw80.tl2.p245) • lexmark ms417 firmware (<= lw80.tl2.p245) • lexmark ms510 firmware (<= lw80.pr2.p245) • lexmark ms517 firmware (<= lw80.pr2.p245) • lexmark ms610de firmware (<= lw80.pr4.p245) • lexmark ms610dn firmware (<= lw80.pr2.p245) • lexmark ms617 firmware (<= lw80.pr2.p245) • lexmark ms710 firmware (<= lw80.dn2.p245) • lexmark ms711 firmware (<= lw80.dn2.p245) • lexmark ms810de firmware (<= lw80.dn4.p245) • lexmark ms810dn firmware (<= lw80.dn2.p245) • lexmark ms811 firmware (<= lw80.dn2.p245) • lexmark ms812de firmware (<= lw80.dn7.p245) • lexmark ms812dn firmware (<= lw80.dn2.p245) • lexmark ms817 firmware (<= lw80.dn2.p245) • lexmark ms818 firmware (<= lw80.dn2.p245) • lexmark ms911 firmware (<= lw80.sa.p245) • lexmark mx310 firmware (<= lw80.sb2.p245) • lexmark mx317 firmware (<= lw80.sb2.p245) • lexmark mx410 firmware (<= lw80.sb4.p245) • lexmark mx417 firmware (<= lw80.sb4.p245) • lexmark mx510 firmware (<= lw80.sb4.p245) • lexmark mx511 firmware (<= lw80.sb4.p245) • lexmark mx517 firmware (<= lw80.sb4.p245) • lexmark mx610 firmware (<= lw80.sb7.p245) • lexmark mx611 firmware (<= lw80.sb7.p245) • lexmark mx617 firmware (<= lw80.sb7.p245) • lexmark mx710 firmware (<= lw80.tu.p245) • lexmark mx711 firmware (<= lw80.tu.p245) • lexmark mx717 firmware (<= lw80.tu.p245) • lexmark mx718 firmware (<= lw80.tu.p245) • lexmark mx810 firmware (<= lw80.tu.p245) • lexmark mx811 firmware (<= lw80.tu.p245) … and 22 more

Related

Weakness · CWE (1)

  • CWE-611 Improper Restriction of XML External Entity Reference weakness

References