What is the severity of CVE-2024-11346?

CVE-2024-11346 is a critical vulnerability that allows resource injection through type confusion in specific Lexmark printer models.

How do I fix CVE-2024-11346?

To fix CVE-2024-11346, you should update your Lexmark printer firmware to the latest version as recommended by Lexmark International.

Which Lexmark printer models are affected by CVE-2024-11346?

CVE-2024-11346 affects Lexmark CX, XC, and CS series printers with firmware versions from 001.001:0 to 081.231 and various P versions.

What does resource injection mean in the context of CVE-2024-11346?

Resource injection in CVE-2024-11346 refers to unauthorized access or manipulation of resources due to improper type handling in the printer's Postscript interpreter.

Is CVE-2024-11346 exploitable remotely?

Yes, CVE-2024-11346 can potentially be exploited remotely if the affected Lexmark printers are accessible over a network.

Vulnerability/
CVE-2024-11346

high

7.3

CWE

843

13/2/2025

CVE-2024-11346

First published: Thu Feb 13 2025(Updated: )

: Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from *.*.P001 through *.*.P233, from *.*.P001 through *.*.P759, from *.*.P001 through *.*.P836.

Credit: 7bc73191-a2b6-4c63-9918-753964601853

Affected Software	Affected Version	How to fix
Lexmark CX Series	>=001.001:0<081.231>=..P001>=..P001>=..P001

Never miss a vulnerability like this again

Reference Links

https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html

Frequently Asked Questions

What is the severity of CVE-2024-11346?
CVE-2024-11346 is a critical vulnerability that allows resource injection through type confusion in specific Lexmark printer models.
How do I fix CVE-2024-11346?
To fix CVE-2024-11346, you should update your Lexmark printer firmware to the latest version as recommended by Lexmark International.
Which Lexmark printer models are affected by CVE-2024-11346?
CVE-2024-11346 affects Lexmark CX, XC, and CS series printers with firmware versions from 001.001:0 to 081.231 and various P versions.
What does resource injection mean in the context of CVE-2024-11346?
Resource injection in CVE-2024-11346 refers to unauthorized access or manipulation of resources due to improper type handling in the printer's Postscript interpreter.
Is CVE-2024-11346 exploitable remotely?
Yes, CVE-2024-11346 can potentially be exploited remotely if the affected Lexmark printers are accessible over a network.

collector/nvd-api
source/NVD
agent/severity
agent/last-modified-date
agent/weakness
agent/references
agent/author
agent/source
agent/first-publish-date
agent/description
agent/type
agent/event
agent/softwarecombine
agent/tags
agent/guess-ai
agent/software-canonical-lookup
vendor/lexmark
canonical/lexmark cx series

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.