CVE-2021-44734

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Embedded web server input sanitization vulnerability in Lexmark devices through 2021-12-07, which can which can lead to remote code execution on the device.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://support.lexmark.com/alerts/Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-332/Third Party Advisory, VDB Entry
https://support.lexmark.com/alerts/Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-332/Third Party Advisory, VDB Entry

Timeline

Published: Jan 20, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-447359.8Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.CVE-2021-447369.8The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” feature.CVE-2021-447378.8PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files.CVE-2021-447389.8Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter.CVE-2021-447394.3Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affecte CVE-2021-44744.9Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote att CVE-2021-447405.5Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Null point CVE-2021-447415.5Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Null point CVE-2021-447425.5Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bo CVE-2021-447437.8Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds write vulnerability that could res CVE-2021-447465.3UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0 and prior, UNIVERGE DT 930 V2.4.0.0 and prior, IP Phone Manager V8.9.1 and prio CVE-2021-447476.5A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure produ