Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-9269

Server-Side Request Forgery (SSRF) vulnerability found in embedded web server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Lexmark

Description

A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lexmark CX, XC, CS, MS, MX, XM, et. al.

Default version status: unaffected

  • 0 to ≤ CXTLS.250.199affected
  • 0 to ≤ MXTLS.250.199affected
  • 0 to ≤ CSTLS.250.199affected
  • 0 to ≤ MSNSN.250.199affected
  • 0 to ≤ MSTSN.250.199affected
  • 0 to ≤ MXTSN.250.199affected
  • 0 to ≤ CSNGV.250.199affected
  • 0 to ≤ CSTGV.250.199affected
  • 0 to ≤ CXTGV.250.199affected
  • 0 to ≤ CXTPC.250.199affected
  • 0 to ≤ CSTPC.250.199affected
  • 0 to ≤ MXTCT.250.199affected
  • 0 to ≤ MXTPM.250.199affected
  • 0 to ≤ CXTMM.250.199affected
  • 0 to ≤ CSTMM.250.199affected
  • 0 to ≤ MSNGM.250.199affected
  • 0 to ≤ MSTGM.250.199affected
  • 0 to ≤ MXNGM.250.199affected
  • 0 to ≤ MXTGM.250.199affected
  • 0 to ≤ MSNGW.250.199affected
  • 0 to ≤ MSTGW.250.199affected
  • 0 to ≤ MXTGW.250.199affected
  • 0 to ≤ CSTZJ.250.199affected
  • 0 to ≤ CSNZJ.250.199affected
  • 0 to ≤ CXTZJ.250.199affected
  • 0 to ≤ CXNZJ.250.199affected
  • 0 to ≤ MSLSG.230.466affected
  • 0 to ≤ MXLSG.230.466affected
  • 0 to ≤ MSLBD.230.466affected
  • 0 to ≤ MXLBD.230.466affected
  • 0 to ≤ CSLBN.230.466affected
  • 0 to ≤ CSLBL.230.466affected
  • 0 to ≤ CXLBN.230.466affected
  • 0 to ≤ CXLBL.230.466affected
  • 0 to ≤ CXTPP.230.466affected
  • 0 to ≤ CSTPP.230.466affected
  • 0 to ≤ CSTAT.230.466affected
  • 0 to ≤ CXTAT.230.466affected
  • 0 to ≤ CSTMH.230.466affected
  • 0 to ≤ CXTMH.230.466affected
  • 0 to ≤ LW90.TL2.P224affected
  • 0 to ≤ LW90.PR2.P224affected
  • 0 to ≤ LW90.PR4.P224affected
  • 0 to ≤ LW90.SB4.P224affected
  • 0 to ≤ LW90.SB7.P224affected
  • 0 to ≤ LW90.DN2.P224affected
  • 0 to ≤ LW90.DN4.P224affected
  • 0 to ≤ LW90.DN7.P224affected
  • 0 to ≤ LW90.TU.P224affected
  • 0 to ≤ LW90.SA.P224affected
  • 0 to ≤ LW90.MG.P224affected
  • 0 to ≤ LW90.GM7.P224affected
  • 0 to ≤ LW90.GM4.P224affected
  • 0 to ≤ LW90.VY4.P224affected
  • 0 to ≤ LW80.PRL.P260affected
  • 0 to ≤ LW80.SB2.P260affected
  • 0 to ≤ LW80.VYL.P260affected
  • 0 to ≤ LW80.VY2.P260affected
  • 0 to ≤ LW80.GM2.P260affected

References