ZDI-CAN-25849: ZDI-25-221: (Pwn2Own) Lexmark CX331adwe httpd extract-trace Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Lexmark CX331adwe printers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-25849?
The severity of ZDI-CAN-25849 is classified as high due to its potential for privilege escalation.
How do I fix ZDI-CAN-25849?
To fix ZDI-CAN-25849, ensure that your Lexmark CX331adwe printer firmware is updated to the latest version provided by Lexmark.
Who is affected by ZDI-CAN-25849?
ZDI-CAN-25849 affects installations of the Lexmark CX331adwe printer.
What type of attack does ZDI-CAN-25849 involve?
ZDI-CAN-25849 involves local attacks where an attacker must have the ability to run low-privileged code to exploit the vulnerability.
What is the impact of exploiting ZDI-CAN-25849?
Exploiting ZDI-CAN-25849 can lead to unauthorized privilege escalation on affected Lexmark CX331adwe printers.