CVE-2016-3145

MEDIUM · 4.6 CVSS Gepubliceerd: 22-04-2016 CWE-200

Beschrijving

Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on non-volatile memory.

Vendors

Lexmark

Affected products

Printer Firmware Cx820de Cx820dtfe Cx825de Cx825dte Cx825dtfe Cx860de Cx860dte Cx860dtfe Xc6152de Xc6152dtfe Xc8155de Xc8155dte Xc8160de Xc8160dte C4150 Cs720de Cs720dte Cs725de Cs725dte C6160 Cs820de Cs820dte Cs820dtfe Cx725de Cx725dhe Cx725dthe Xc4150

References

support.lexmark.com