GCVE - cpe:2.3:o:lexmark:xm7170_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:lexmark:xm7170_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Lexmark (`380e7774-7a36-523e-93f3-2ee54971c96b`)
Product	Xm7170 Firmware (`93c60f72-9174-5106-b9c3-05d5d24a00da`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-40239`	vulnerable	2026-06-08 06:09:41.880896	Details available Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80..P246, i.e., '' indicates that the full version specification varies across product model family, but firmware level P246 (or higher) is required to remediate the vulnerability. Published: 2023-09-01T00:00:00.000Z Updated: 2024-10-01T14:26:17.023Z Open on db.gcve.eu Reference links https://publications.lexmark.com/publications/security-alerts/CVE-2023-40239.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44738`	vulnerable	2026-06-08 05:36:47.329308	Details available Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter. Published: 2022-01-20T15:59:46.000Z Updated: 2024-08-04T04:32:12.295Z Open on db.gcve.eu Reference links https://support.lexmark.com/alerts/ https://www.zerodayinitiative.com/advisories/ZDI-22-327/ https://www.zerodayinitiative.com/advisories/ZDI-22-328/ https://www.zerodayinitiative.com/advisories/ZDI-22-382/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44737`	vulnerable	2026-06-08 05:36:47.281823	Details available PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files. Published: 2022-01-20T16:04:39.000Z Updated: 2024-08-04T04:32:12.285Z Open on db.gcve.eu Reference links https://support.lexmark.com/alerts/ https://www.zerodayinitiative.com/advisories/ZDI-22-333/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44734`	vulnerable	2026-06-08 05:36:47.125071	db.gcve.eu details are currently unavailable. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6489`	vulnerable	2026-06-08 05:14:11.709430	db.gcve.eu details are currently unavailable. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.