Lucene search

[email protected]CVE-2021-35469

HistoryJul 14, 2021 - 12:15 p.m.

CVE-2021-35469

2021-07-1412:15:09

CWE-428

[email protected]

web.nvd.nist.gov

cve-2021-35469

lexmark printer software

local escalation

privilege vulnerability

unquoted service path

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry that has an unquoted service path.

Affected configurations

NVD

Node

lexmarkprinter_software_g2Range≤1.8.0.0

lexmarkprinter_software_g3Range≤1.2.0.0

lexmarkprinter_software_g4Range≤1.3.0.0

CPENameOperatorVersion
lexmark:printer_software_g2lexmark printer software g2le1.8.0.0
lexmark:printer_software_g3lexmark printer software g3le1.2.0.0
lexmark:printer_software_g4lexmark printer software g4le1.3.0.0

CPE	Name	Operator	Version
lexmark:printer_software_g2	lexmark printer software g2	le	1.8.0.0
lexmark:printer_software_g3	lexmark printer software g3	le	1.2.0.0
lexmark:printer_software_g4	lexmark printer software g4	le	1.3.0.0

References

support.lexmark.com/alerts/

support.lexmark.com/index?id=TE952&page=content&locale=en&userlocale=EN_US

Social References

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2021-35469

cvelist1 prion1 nvd1 openvas1