Back to feed
EUVD-2016-4197 · Published Apr 22, 2016
Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on non-volatile memory.
Technologies
Lexmark C6160Lexmark Xc8160DeLexmark Cx820DeLexmark Cs725DeLexmark Xc4150Lexmark Cx725DeLexmark Cx825DtfeLexmark Xc8155DeLexmark Cs720DeLexmark Cx825DeLexmark Cs820DtfeLexmark Cx860DeLexmark Xc6152DeLexmark Xc8160DteLexmark C4150Lexmark Cx860DteLexmark Cs820DeLexmark Xc6152DtfeLexmark Cx825DteLexmark Cx725DheLexmark Cx725DtheLexmark Cx860DtfeLexmark Cs725DteLexmark Printer FirmwareLexmark Cx820DtfeLexmark Cs720DteLexmark Cs820DteLexmark Xc8155Dte
Weaknesses
CWE-200
CVSS scores
- v3.04.6
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - v2.02.1
AV:L/AC:L/Au:N/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
Potentially impacted assets
See if this affects your attack surface
