peter bassill · operator
$ cve CVE-2021-44735 JSON

CVE-2021-44735

9.8
CRITICAL · CVSS 3.1 · EPSS 7% (pctl 94)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS7.03% — more likely to be exploited than 94% of all CVEs
WeaknessCWE-77
On CISA KEVno
Public exploitnone known
Published2022-01-20
Last modified2026-06-17

Affected (40)

VendorProduct
lexmarkb2236
lexmarkb2236 firmware
lexmarkb2338
lexmarkb2338 firmware
lexmarkb2442
lexmarkb2442 firmware
lexmarkb2546
lexmarkb2546 firmware
lexmarkb3340
lexmarkb3340 firmware
lexmarkb3442
lexmarkb3442 firmware
lexmarkm1242
lexmarkm1242 firmware
lexmarkm1246
lexmarkm1246 firmware
lexmarkm1342
lexmarkm1342 firmware
lexmarkmb2236
lexmarkmb2236 firmware
lexmarkmb3442
lexmarkmb3442 firmware
lexmarkms321
lexmarkms321 firmware
lexmarkms331
lexmarkms331 firmware
lexmarkms421
lexmarkms421 firmware
lexmarkms431
lexmarkms431 firmware
lexmarkms521
lexmarkms521 firmware
lexmarkms621
lexmarkms621 firmware
lexmarkmx331
lexmarkmx331 firmware
lexmarkmx431
lexmarkmx431 firmware
lexmarkxm1342
lexmarkxm1342 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD