CVEvulnerability
CVE-2023-40239
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-09-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-611
Description
Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80.*.P246, i.e., '*' indicates that the full version specification varies across product model family, but firmware level P246 (or higher) is required to remediate the vulnerability.
Affected configurations
• lexmark c2132 firmware (<= lw80.vy4.p245)
• lexmark cs310 firmware (<= lw80.vyl.p245)
• lexmark cs317 firmware (<= lw80.vyl.p245)
• lexmark cs410 firmware (<= lw80.vy2.p245)
• lexmark cs417 firmware (<= lw80.vy2.p245)
• lexmark cs510 firmware (<= lw80.vy4.p245)
• lexmark cs517 firmware (<= lw80.vy4.p245)
• lexmark cx310 firmware (<= lw80.gm2.p245)
• lexmark cx317 firmware (<= lw80.gm2.p245)
• lexmark cx410 firmware (<= lw80.gm4.p245)
• lexmark cx417 firmware (<= lw80.gm4.p245)
• lexmark cx510 firmware (<= lw80.gm7.p245)
• lexmark cx517 firmware (<= lw80.gm7.p245)
• lexmark m1140\+ firmware (<= lw80.pr2.p245)
• lexmark m1140 firmware (<= lw80.prl.p245)
• lexmark m1145 firmware (<= lw80.pr2.p245)
• lexmark m3150de firmware (<= lw80.pr4.p245)
• lexmark m3150dn firmware (<= lw80.pr2.p245)
• lexmark m5155 firmware (<= lw80.dn4.p245)
• lexmark m5163de firmware (<= lw80.dn4.p245)
• lexmark m5163dn firmware (<= lw80.dn2.p245)
• lexmark m5170 firmware (<= lw80.dn7.p245)
• lexmark ms310 firmware (<= lw80.prl.p245)
• lexmark ms312 firmware (<= lw80.prl.p245)
• lexmark ms315 firmware (<= lw80.tl2.p245)
• lexmark ms317 firmware (<= lw80.prl.p245)
• lexmark ms410 firmware (<= lw80.prl.p245)
• lexmark ms415 firmware (<= lw80.tl2.p245)
• lexmark ms417 firmware (<= lw80.tl2.p245)
• lexmark ms510 firmware (<= lw80.pr2.p245)
• lexmark ms517 firmware (<= lw80.pr2.p245)
• lexmark ms610de firmware (<= lw80.pr4.p245)
• lexmark ms610dn firmware (<= lw80.pr2.p245)
• lexmark ms617 firmware (<= lw80.pr2.p245)
• lexmark ms710 firmware (<= lw80.dn2.p245)
• lexmark ms711 firmware (<= lw80.dn2.p245)
• lexmark ms810de firmware (<= lw80.dn4.p245)
• lexmark ms810dn firmware (<= lw80.dn2.p245)
• lexmark ms811 firmware (<= lw80.dn2.p245)
• lexmark ms812de firmware (<= lw80.dn7.p245)
• lexmark ms812dn firmware (<= lw80.dn2.p245)
• lexmark ms817 firmware (<= lw80.dn2.p245)
• lexmark ms818 firmware (<= lw80.dn2.p245)
• lexmark ms911 firmware (<= lw80.sa.p245)
• lexmark mx310 firmware (<= lw80.sb2.p245)
• lexmark mx317 firmware (<= lw80.sb2.p245)
• lexmark mx410 firmware (<= lw80.sb4.p245)
• lexmark mx417 firmware (<= lw80.sb4.p245)
• lexmark mx510 firmware (<= lw80.sb4.p245)
• lexmark mx511 firmware (<= lw80.sb4.p245)
• lexmark mx517 firmware (<= lw80.sb4.p245)
• lexmark mx610 firmware (<= lw80.sb7.p245)
• lexmark mx611 firmware (<= lw80.sb7.p245)
• lexmark mx617 firmware (<= lw80.sb7.p245)
• lexmark mx710 firmware (<= lw80.tu.p245)
• lexmark mx711 firmware (<= lw80.tu.p245)
• lexmark mx717 firmware (<= lw80.tu.p245)
• lexmark mx718 firmware (<= lw80.tu.p245)
• lexmark mx810 firmware (<= lw80.tu.p245)
• lexmark mx811 firmware (<= lw80.tu.p245)
… and 22 more
Related
Weakness · CWE (1)
- CWE-611 Improper Restriction of XML External Entity Reference weakness