Description
A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified.
Scores
CVSS v3
4.3
EPSS
0.0002
EPSS Percentile
5.5%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-1328
CWE-354
Status
published
Products (4)
Lexmark/Printer Firmware
< 230.041
Lexmark/Printer Firmware
230.075 - 230.086
Lexmark/Printer Firmware
230.100 - 230.104
Lexmark/Printer Firmware
230.200 - 230.209
Published
Jan 17, 2025
Tracked Since
Feb 18, 2026