CVE-2021-44737

CWE-22 — Path Traversal3 documents3 sources
Severity
8.8HIGH
EPSS
0.8%
top 25.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
234
Lexmark 6500e FirmwareLexmark B2236 FirmwareLexmark B2338 Firmware+231 more
Timeline
PublishedJan 20
Latest updateJan 21

Description

PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages234 packages

▶NVDlexmark/c734_firmware< lr.sk.p835
▶NVDlexmark/c736_firmware< lr.ske.p835
▶NVDlexmark/c746_firmware< lhs60.cm2.p753
▶NVDlexmark/c748_firmware< lhs60.cm4.p753
▶NVDlexmark/c792_firmware< lhs60.hc.p753

🔴Vulnerability Details

2
GHSA
GHSA-9qpx-hw6q-qw9h: PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files↗2022-01-21
▶
CVEList
CVE-2021-44737: PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files↗2022-01-20
▶
CVE-2021-44737 (HIGH CVSS 8.8) | PJL directory traversal vulnerabili | cvebase.io