CVE-2025-9269: Lexmark CX, XC, CS, MS, MX, XM, et. al., SSRF

Описание

Оригинално описание

A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.

Засегнати продукти

• Lexmark CX, XC, CS, MS, MX, XM, et. al.: до CXTLS.250.199; до MXTLS.250.199; до CSTLS.250.199; до MSNSN.250.199; до MSTSN.250.199; до MXTSN.250.199; до CSNGV.250.199; до CSTGV.250.199; до CXTGV.250.199; до CXTPC.250.199; до CSTPC.250.199; до MXTCT.250.199; до MXTPM.250.199; до CXTMM.250.199; до CSTMM.250.199; до MSNGM.250.199; до MSTGM.250.199; до MXNGM.250.199; до MXTGM.250.199; до MSNGW.250.199; до MSTGW.250.199; до MXTGW.250.199; до CSTZJ.250.199; до CSNZJ.250.199; до CXTZJ.250.199; до CXNZJ.250.199; до MSLSG.230.466; до MXLSG.230.466; до MSLBD.230.466; до MXLBD.230.466; до CSLBN.230.466; до CSLBL.230.466; до CXLBN.230.466; до CXLBL.230.466; до CXTPP.230.466; до CSTPP.230.466; до CSTAT.230.466; до CXTAT.230.466; до CSTMH.230.466; до CXTMH.230.466; до LW90.TL2.P224; до LW90.PR2.P224; до LW90.PR4.P224; до LW90.SB4.P224; до LW90.SB7.P224; до LW90.DN2.P224; до LW90.DN4.P224; до LW90.DN7.P224; до LW90.TU.P224; до LW90.SA.P224; до LW90.MG.P224; до LW90.GM7.P224; до LW90.GM4.P224; до LW90.VY4.P224; до LW80.PRL.P260; до LW80.SB2.P260; до LW80.VYL.P260; до LW80.VY2.P260; до LW80.GM2.P260

Вид слабост

• CWE-918 Server-Side Request Forgery

История

Други уязвимости в Lexmark CX, XC, CS, MS, MX, XM, et. al.

• 7.3CVE-2024-11344
• 9.1CVE-2025-1127

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-9269
• https://nvd.nist.gov/vuln/detail/CVE-2025-9269
• https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html