CVE-2016-1896

CRITICAL · 9.8 CVSS Gepubliceerd: 27-01-2016 CWE-254

Beschrijving

Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.

Vendors

Lexmark

Affected products

Printer Firmware C4150 Cs720de Cs720dte Cs725de Cs725dte Cx725de Cx725dhe Cx725dthe Xc4150 C6160 Cs820de Cs820dte Cs820dtfe Cx820de Cx820dtfe Cx825de Cx825dte Cx825dtfe Cx860de Cx860dte Cx860dtfe Xc6152de Xc6152dtfe Xc8155de Xc8155dte Xc8160de Xc8160dte

References

support.lexmark.com