Lexmark has identified a vulnerability in our Lexmark Print Management Client (LPMC).

A Reliance on Untrusted Inputs in a Security Decision vulnerability has been identified in the Lexmark Print Management Client.

Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server

The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.

Server-Side Request Forgery (SSRF) vulnerability found in embedded web server

A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.

Lexmark products through 2022-02-10 have Incorrect Access Control.