GCVE - cpe:2.3:o:lexmark:xm5163_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:lexmark:xm5163_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Lexmark (`380e7774-7a36-523e-93f3-2ee54971c96b`)
Product	Xm5163 Firmware (`d9c33c10-f430-5261-9bec-84d504e03ac5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-40239`	vulnerable	2026-06-08 06:09:41.866936	Details available Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80..P246, i.e., '' indicates that the full version specification varies across product model family, but firmware level P246 (or higher) is required to remediate the vulnerability. Published: 2023-09-01T00:00:00.000Z Updated: 2024-10-01T14:26:17.023Z Open on db.gcve.eu Reference links https://publications.lexmark.com/publications/security-alerts/CVE-2023-40239.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44738`	vulnerable	2026-06-08 05:36:47.328778	Details available Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter. Published: 2022-01-20T15:59:46.000Z Updated: 2024-08-04T04:32:12.295Z Open on db.gcve.eu Reference links https://support.lexmark.com/alerts/ https://www.zerodayinitiative.com/advisories/ZDI-22-327/ https://www.zerodayinitiative.com/advisories/ZDI-22-328/ https://www.zerodayinitiative.com/advisories/ZDI-22-382/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44737`	vulnerable	2026-06-08 05:36:47.281213	Details available PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files. Published: 2022-01-20T16:04:39.000Z Updated: 2024-08-04T04:32:12.285Z Open on db.gcve.eu Reference links https://support.lexmark.com/alerts/ https://www.zerodayinitiative.com/advisories/ZDI-22-333/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44734`	vulnerable	2026-06-08 05:36:47.111550	Details available Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to remote code execution on the device. Published: 2022-01-20T16:11:21.000Z Updated: 2024-08-04T04:32:12.217Z Open on db.gcve.eu Reference links https://support.lexmark.com/alerts/ https://www.zerodayinitiative.com/advisories/ZDI-22-332/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6489`	vulnerable	2026-06-08 05:14:11.703547	Details available Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices before 2019-02-11 allow remote attackers to erase stored shortcuts. Published: 2019-02-11T21:00:00.000Z Updated: 2024-08-04T20:23:20.959Z Open on db.gcve.eu Reference links http://support.lexmark.com/index?page=content&id=TE912	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.