{"id":"CVE-2025-65077","state":"PUBLISHED","title":"Relative path traversal vulnerability in Embedded Solutions Framework","description":"A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.","publishedAt":"2026-02-03T20:44:32.330Z","updatedAt":"2026-02-26T15:04:23.610Z","severity":{"score":8.8,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N","source":"Lexmark"},"assigner":"Lexmark","products":["Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ","Lexmark CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG"],"affected":[{"vendor":"Lexmark","product":"MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"250.210","versionType":"custom"}]},{"vendor":"Lexmark","product":"CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"230.507","versionType":"custom"}]}],"references":["https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"],"weaknesses":["CWE-22"],"ingestedAt":"2026-10-29T20:09:56.034Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/65xxx/CVE-2025-65077.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-65077","state":"PUBLISHED","datePublished":"2026-02-03T20:44:32.330Z","dateUpdated":"2026-02-26T15:04:23.610Z","assignerShortName":"Lexmark","assignerOrgId":"7bc73191-a2b6-4c63-9918-753964601853","dateReserved":"2025-11-17T13:56:38.587Z"},"containers":{"cna":{"title":"Relative path traversal vulnerability in Embedded Solutions Framework","descriptions":[{"lang":"en","value":"A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."}],"affected":[{"vendor":"Lexmark","product":"MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"250.210","versionType":"custom"}]},{"vendor":"Lexmark","product":"CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"230.507","versionType":"custom"}]}],"references":[{"url":"https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.8,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","description":"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Lexmark","orgId":"7bc73191-a2b6-4c63-9918-753964601853","dateUpdated":"2026-02-03T20:44:32.330Z"},"exploits":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory.\n\n<br>"}],"value":"Lexmark is not aware of any malicious use against Lexmark products of the vulnerability described in this advisory."}],"impacts":[{"capecId":"CAPEC-139","descriptions":[{"lang":"en","value":"CAPEC-139 Relative Path Traversal"}]}],"source":{"discovery":"UNKNOWN"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Lexmark recommends a firmware update if your device has affected firmware.\n\n<br>"}],"value":"Lexmark recommends a firmware update if your device has affected firmware."}],"x_generator":{"engine":"Vulnogram 0.5.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-65077","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-02-06T04:55:27.610829Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-26T15:04:23.610Z"}}]}}}