CVE-2023-40239: XEE
Published Sep 1, 2023
·Updated
Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80..P246, i.e., '' indicates that the full version specification varies across product model family, but firmware level P246 (or higher) is required to remediate the vulnerability.
Affected Software
164 affected components
Lexmark C2132 Firmware<=lw80.vy4.p245
Lexmark C2132
Lexmark Cs310 Firmware<=lw80.vyl.p245
Lexmark CS310
Lexmark Cs317 Firmware<=lw80.vyl.p245
Lexmark Cs317
Lexmark Cs410 Firmware<=lw80.vy2.p245
Lexmark Cs410
Lexmark Cs417 Firmware<=lw80.vy2.p245
Lexmark Cs417
Lexmark Cs510 Firmware<=lw80.vy4.p245
Lexmark Cs510
Lexmark Cs517 Firmware<=lw80.vy4.p245
Lexmark Cs517
Lexmark Cx310 Firmware<=lw80.gm2.p245
Lexmark CX310
Lexmark Cx317 Firmware<=lw80.gm2.p245
Lexmark Cx317
Lexmark Cx410 Firmware<=lw80.gm4.p245
Lexmark CX410
Lexmark Cx417 Firmware<=lw80.gm4.p245
Lexmark Cx417
Lexmark Cx510 Firmware<=lw80.gm7.p245
Lexmark CX510
Lexmark Cx517 Firmware<=lw80.gm7.p245
Lexmark Cx517
Lexmark M1140\+ Firmware<=lw80.pr2.p245
Lexmark M1140\+
Lexmark M1140 Firmware<=lw80.prl.p245
Lexmark M1140
Lexmark M1145 Firmware<=lw80.pr2.p245
Lexmark M1145
Lexmark M3150de Firmware<=lw80.pr4.p245
Lexmark M3150de
Lexmark M3150dn Firmware<=lw80.pr2.p245
Lexmark M3150dn
Lexmark M5155 Firmware<=lw80.dn4.p245
Lexmark M5155
Lexmark M5163de Firmware<=lw80.dn4.p245
Lexmark M5163de
Lexmark M5163dn Firmware<=lw80.dn2.p245
Lexmark M5163dn
Lexmark M5170 Firmware<=lw80.dn7.p245
Lexmark M5170
Lexmark Ms310 Firmware<=lw80.prl.p245
Lexmark MS310
Lexmark Ms312 Firmware<=lw80.prl.p245
Lexmark MS312
Lexmark Ms315 Firmware<=lw80.tl2.p245
Lexmark MS315
Lexmark Ms317 Firmware<=lw80.prl.p245
Lexmark MS317
Lexmark Ms410 Firmware<=lw80.prl.p245
Lexmark MS410
Lexmark Ms415 Firmware<=lw80.tl2.p245
Lexmark MS415
Lexmark Ms417 Firmware<=lw80.tl2.p245
Lexmark MS417
Lexmark Ms510 Firmware<=lw80.pr2.p245
Lexmark Ms510
Lexmark Ms517 Firmware<=lw80.pr2.p245
Lexmark Ms517
Lexmark Ms610de Firmware<=lw80.pr4.p245
Lexmark MS610de
Lexmark Ms610dn Firmware<=lw80.pr2.p245
Lexmark MS610dn
Lexmark Ms617 Firmware<=lw80.pr2.p245
Lexmark MS617
Lexmark Ms710 Firmware<=lw80.dn2.p245
Lexmark Ms710
Lexmark Ms711 Firmware<=lw80.dn2.p245
Lexmark Ms711
Lexmark Ms810de Firmware<=lw80.dn4.p245
Lexmark MS810de
Lexmark Ms810dn Firmware<=lw80.dn2.p245
Lexmark Ms810dn
Lexmark Ms811 Firmware<=lw80.dn2.p245
Lexmark MS811
Lexmark Ms812de Firmware<=lw80.dn7.p245
Lexmark MS812de
Lexmark Ms812dn Firmware<=lw80.dn2.p245
Lexmark Ms812dn
Lexmark Ms817 Firmware<=lw80.dn2.p245
Lexmark MS817
Lexmark Ms818 Firmware<=lw80.dn2.p245
Lexmark MS818
Lexmark Ms911 Firmware<=lw80.sa.p245
Lexmark Ms911
Lexmark Mx310 Firmware<=lw80.sb2.p245
Lexmark Mx310
Lexmark Mx317 Firmware<=lw80.sb2.p245
Lexmark Mx317
Lexmark Mx410 Firmware<=lw80.sb4.p245
Lexmark MX410
Lexmark Mx417 Firmware<=lw80.sb4.p245
Lexmark Mx417
Lexmark Mx510 Firmware<=lw80.sb4.p245
Lexmark MX510
Lexmark Mx511 Firmware<=lw80.sb4.p245
Lexmark MX511
Lexmark Mx517 Firmware<=lw80.sb4.p245
Lexmark Mx517
Lexmark Mx610 Firmware<=lw80.sb7.p245
Lexmark MX610
Lexmark Mx611 Firmware<=lw80.sb7.p245
Lexmark MX611
Lexmark Mx617 Firmware<=lw80.sb7.p245
Lexmark Mx617
Lexmark Mx710 Firmware<=lw80.tu.p245
Lexmark Mx710
Lexmark Mx711 Firmware<=lw80.tu.p245
Lexmark Mx711
Lexmark Mx717 Firmware<=lw80.tu.p245
Lexmark Mx717
Lexmark Mx718 Firmware<=lw80.tu.p245
Lexmark Mx718
Lexmark Mx810 Firmware<=lw80.tu.p245
Lexmark Mx810
Lexmark Mx811 Firmware<=lw80.tu.p245
Lexmark Mx811
Lexmark Mx812 Firmware<=lw80.tu.p245
Lexmark Mx812
Lexmark Mx910 Firmware<=lw80.mg.p245
Lexmark Mx910
Lexmark Mx911 Firmware<=lw80.mg.p245
Lexmark Mx911
Lexmark Mx912 Firmware<=lw80.mg.p245
Lexmark Mx912
Lexmark Xc2130 Firmware<=lw80.gm4.p245
Lexmark XC2130
Lexmark Xc2132 Firmware<=lw80.gm7.p245
Lexmark XC2132
Lexmark Xm1135 Firmware<=lw80.sb2.p245
Lexmark XM1135
Lexmark Xm1140 Firmware<=lw80.sb4.p245
Lexmark XM1140
Lexmark Xm1145 Firmware<=lw80.sb4.p245
Lexmark XM1145
Lexmark Xm3150 Firmware<=lw80.sb7.p245
Lexmark XM3150
Lexmark Xm5163 Firmware<=lw80.tu.p245
Lexmark Xm5163
Lexmark Xm5170 Firmware<=lw80.tu.p245
Lexmark Xm5170
Lexmark Xm5263 Firmware<=lw80.tu.p245
Lexmark Xm5263
Lexmark Xm5270 Firmware<=lw80.tu.p245
Lexmark Xm5270
Lexmark Xm7155 Firmware<=lw80.tu.p245
Lexmark Xm7155
Lexmark Xm7163 Firmware<=lw80.tu.p245
Lexmark Xm7163
Lexmark Xm7170 Firmware<=lw80.tu.p245
Lexmark Xm7170
Lexmark Xm7263 Firmware<=lw80.tu.p245
Lexmark Xm7263
Lexmark Xm7270 Firmware<=lw80.tu.p245
Lexmark Xm7270
Lexmark Xm9145 Firmware<=lw80.mg.p245
Lexmark Xm9145
Lexmark Xm9155 Firmware<=lw80.mg.p245
Lexmark Xm9155
Lexmark Xm9165 Firmware<=lw80.mg.p245
Lexmark Xm9165
Event History
Sep 1, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-40239?
CVE-2023-40239 has a medium severity level due to its potential for information disclosure through XXE attacks.
2
How do I fix CVE-2023-40239?
To address CVE-2023-40239, update the firmware of the affected Lexmark devices to version LW80.*.P246 or higher.
3
Which Lexmark devices are affected by CVE-2023-40239?
CVE-2023-40239 affects several Lexmark devices including models such as CS310, C2132, CX310, and others prior to specific firmware updates.
4
What kind of attack does CVE-2023-40239 allow?
CVE-2023-40239 allows for XML External Entity (XXE) attacks which can lead to unauthorized information disclosure.
5
When was CVE-2023-40239 reported?
CVE-2023-40239 was reported and acknowledged before the firmware fix was made available on August 25, 2023.