CVEvulnerability

CVE-2025-65077

8.8 HIGH Published 2026-02-03 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2026-02-03
Last modified
2026-06-17
Assigner
7bc73191-a2b6-4c63-9918-753964601853
CVSS 4.0 (7bc73191-a2b6-4c63-9918-753964601853)
8.8 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses
CWE-22

Description

A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References