CVE-2023-50737

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
Lexmarkvariousvarious
lexmarkcxtpc_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcstpc_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkmxtct_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkmxtpm_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcxtmm_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkmslsg_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkmxlsg_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkmslbd_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkmxlbd_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkmsngm_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkmstgm_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkmxngm_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkms315<= lw90.tl2.p205
lexmarkms610dn<= lw90.pr2.p205
lexmarkmxtgm_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkmsngw_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkmstgw_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkmxtgw_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcslbn_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcslbl_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcxlbn_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcxlbl_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcstzj_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcsnzj_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcxtzj_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcxnzj_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcxtpp_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcstpp_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcstat_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcxtat_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcstmh_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcxtmh_firmware<= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkmsnsn_firmware<= 222.030; >= 230.001, <= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkmstsn_firmware<= 222.030; >= 230.001, <= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcx410<= lw90.gm4.p205
lexmarkmxtsn_firmware<= 222.030; >= 230.001, <= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcsngv_firmware<= 222.030; >= 230.001, <= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcstgv_firmware<= 222.030; >= 230.001, <= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkcxtgv_firmware<= 222.030; >= 230.001, <= 230.041; >= 230.075, <= 230.078; >= 230.200, <= 230.203
lexmarkms610de<= lw90.pr4.p205
lexmarkmx410<= lw90.sb4.p205
lexmarkmx610<= lw90.sb7.p205
lexmarkms711<= lw90.dn2.p205
lexmarkms810de<= lw90.dn4.p205
lexmarkms812de<= lw90.dn7.p205
lexmarkmx710<= lw90.tu.p205
lexmarkms911<= lw90.sa.p205
lexmarkmx910<= lw90.mg.p205
lexmarkmx6500e<= lw90.jd.p205

References

Timeline

Published
Feb 28, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-507384.3A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection haCVE-2023-507398.8A buffer overflow vulnerability has been identified in the Internet Printing Protocol (IPP) in various Lexmark devices. The vulnerability caCVE-2023-50749.8Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.2CVE-2023-507405.3In Apache Linkis <=1.4.0, The password is printed to the log when using the Oracle data source of the Linkis data source module.  We recommeCVE-2023-507439.8Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the registratCVE-2023-50756.7A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local attacker with elevatedCVE-2023-507529.8Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'e' parameter of the login.php CVE-2023-507539.8Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the user/updaCVE-2023-50765.4The Ziteboard Online Whiteboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ziteboard' shortcode in versions CVE-2023-507608.8Online Notice Board System v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'f' parameter of user/update_profile_pic.php pCVE-2023-507614.3The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. If present, ThunderbirCVE-2023-507624.3When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown to the user. This is
CVE-2023-50737: Critical severity, CVSS 9.1 | Vulnix