CVE-2025-1127: Lexmark CX, XC, CS, MS, MX, XM, et. al., обхождане на

Описание

Оригинално описание

The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.

Засегнати продукти

• Lexmark CX, XC, CS, MS, MX, XM, et. al.: до CXTLS.240.205; до MXTLS.240.205; до CSTLS.240.205; до MSNSN.240.205; до MSTSN.240.205; до MXTSN.240.205; до CSNGV.240.205; до CSTGV.240.205; до CXTGV.240.205; до CXTPC.240.205; до CSTPC.240.205; до MXTCT.240.205; до MXTPM.240.205; до CXTMM.240.205; до CSTMM.240.205; до MSNGM.240.205; до MSTGM.240.205; до MXNGM.240.205; до MXTGM.240.205; до MSNGW.240.205; до MSTGW.240.205; до MXTGW.240.205; до CSTZJ.240.205; до CSNZJ.240.205; до CXTZJ.240.205; до CXNZJ.240.205; до MSLSG.240.407; до MXLSG.240.407; до MSLBD.240.407; до MXLBD.240.407; до CSLBN.240.407; до CSLBL.240.407; до CXLBN.240.407; до CXLBL.240.407; до CXTPP.240.407; до CSTPP.240.407; до CSTAT.240.407; до CXTAT.240.407; до CSTMH.240.407; до CXTMH.240.407

Вид слабост

• CWE-22 Неправилно ограничаване на път до позволена директория
• CWE-362 Неправилна синхронизация при споделен ресурс (Race Condition)

История

Други уязвимости в Lexmark CX, XC, CS, MS, MX, XM, et. al.

• 6.9CVE-2025-9269
• 7.3CVE-2024-11344

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-1127
• https://nvd.nist.gov/vuln/detail/CVE-2025-1127
• https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html