CVE-2021-44736

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” feature.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 20, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-447378.8PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files.CVE-2021-447389.8Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter.CVE-2021-447394.3Acrobat Reader DC ActiveX Control versions 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affecteCVE-2021-44744.9Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attCVE-2021-447405.5Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Null pointCVE-2021-447415.5Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by a Null pointCVE-2021-447425.5Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-boCVE-2021-447437.8Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds write vulnerability that could resCVE-2021-447465.3UNIVERGE DT 820 V3.2.7.0 and prior, UNIVERGE DT 830 V5.2.7.0 and prior, UNIVERGE DT 930 V2.4.0.0 and prior, IP Phone Manager V8.9.1 and prioCVE-2021-447476.5A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure produCVE-2021-447486.1A vulnerability affecting F-Secure SAFE browser was discovered whereby browsers loads images automatically this vulnerability can be exploitCVE-2021-447499.6A vulnerability affecting F-Secure SAFE browser protection was discovered improper URL handling can be triggered to cause universal cross-si
CVE-2021-44736: Critical severity, CVSS 9.8 | Vulnix