Skip to content
Fencer Vulns
high 8.1

CVE-2022-29850 json

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistenc…

published 2022-08-25 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-34168

cvss
8.1
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.0%
EPSS 1.0% chance of exploitation in 30 days, percentile 64%
public exploits
0
none known

Summary

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots.

Patch / fix

  • lexmark b2236_firmware mslsg.081.014
  • lexmark mb2236_firmware mxlsg.081.014
  • lexmark ms331_firmware mslbd.081.014
  • lexmark ms431_firmware mslbd.081.014
  • lexmark m1342_firmware mslbd.081.014
  • lexmark b3442_firmware mslbd.081.014
  • lexmark b3340_firmware mslbd.081.014
  • lexmark xm1342_firmware mslbd.081.014
  • lexmark mx331_firmware mxlbd.081.014
  • lexmark mx431_firmware mxlbd.081.014
  • lexmark mb3442_firmware mxlbd.081.014
  • lexmark ms321_firmware msngm.081.014
  • lexmark ms421_firmware msngm.081.014
  • lexmark ms521_firmware msngm.081.014
  • lexmark ms621_firmware msngm.081.014
  • lexmark m1242_firmware msngm.081.014
  • lexmark m1246_firmware msngm.081.014
  • lexmark b2338_firmware msngm.081.014
  • lexmark b2442_firmware msngm.081.014
  • lexmark b2546_firmware msngm.081.014

Exploit prediction

1.04% chance of exploitation in the next 30 days, higher than 64% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

Weakness
  • CWE-20 Improper Input Validation
  • CWE-668 Exposure of Resource to Wrong Sphere

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.