Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2025-1127

Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Lexmark

Description

The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lexmark CX, XC, CS, MS, MX, XM, et. al.

Default version status: unaffected

  • 0 to ≤ CXTLS.240.205affected
  • 0 to ≤ MXTLS.240.205affected
  • 0 to ≤ CSTLS.240.205affected
  • 0 to ≤ MSNSN.240.205affected
  • 0 to ≤ MSTSN.240.205affected
  • 0 to ≤ MXTSN.240.205affected
  • 0 to ≤ CSNGV.240.205affected
  • 0 to ≤ CSTGV.240.205affected
  • 0 to ≤ CXTGV.240.205affected
  • 0 to ≤ CXTPC.240.205affected
  • 0 to ≤ CSTPC.240.205affected
  • 0 to ≤ MXTCT.240.205affected
  • 0 to ≤ MXTPM.240.205affected
  • 0 to ≤ CXTMM.240.205affected
  • 0 to ≤ CSTMM.240.205affected
  • 0 to ≤ MSNGM.240.205affected
  • 0 to ≤ MSTGM.240.205affected
  • 0 to ≤ MXNGM.240.205affected
  • 0 to ≤ MXTGM.240.205affected
  • 0 to ≤ MSNGW.240.205affected
  • 0 to ≤ MSTGW.240.205affected
  • 0 to ≤ MXTGW.240.205affected
  • 0 to ≤ CSTZJ.240.205affected
  • 0 to ≤ CSNZJ.240.205affected
  • 0 to ≤ CXTZJ.240.205affected
  • 0 to ≤ CXNZJ.240.205affected
  • 0 to ≤ MSLSG.240.407affected
  • 0 to ≤ MXLSG.240.407affected
  • 0 to ≤ MSLBD.240.407affected
  • 0 to ≤ MXLBD.240.407affected
  • 0 to ≤ CSLBN.240.407affected
  • 0 to ≤ CSLBL.240.407affected
  • 0 to ≤ CXLBN.240.407affected
  • 0 to ≤ CXLBL.240.407affected
  • 0 to ≤ CXTPP.240.407affected
  • 0 to ≤ CSTPP.240.407affected
  • 0 to ≤ CSTAT.240.407affected
  • 0 to ≤ CXTAT.240.407affected
  • 0 to ≤ CSTMH.240.407affected
  • 0 to ≤ CXTMH.240.407affected

References