Skip to content
Fencer Vulns
critical 9.0

CVE-2023-50735 json

A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.

published 2024-02-28 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-55491

cvss
9.0
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.8%
EPSS 0.8% chance of exploitation in 30 days, percentile 55%
public exploits
0
none known

Summary

A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.77% chance of exploitation in the next 30 days, higher than 55% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 9.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected products

  • Lexmark various
  • lexmark cxtpc_firmware
  • lexmark cstpc_firmware
  • lexmark mxtct_firmware
  • lexmark x950
  • lexmark mxtpm_firmware
  • lexmark cxtmm_firmware
  • lexmark mslsg_firmware
  • lexmark mxlsg_firmware
  • lexmark mslbd_firmware
  • lexmark mxlbd_firmware
  • lexmark msngm_firmware
  • lexmark mstgm_firmware
  • lexmark mxngm_firmware
  • lexmark ms315
  • lexmark ms610dn
  • lexmark mxtgm_firmware
  • lexmark msngw_firmware
  • lexmark mstgw_firmware
  • lexmark mxtgw_firmware
  • lexmark cslbn_firmware
  • lexmark cslbl_firmware
  • lexmark cxlbn_firmware
  • lexmark cxlbl_firmware
  • lexmark cstzj_firmware
  • lexmark csnzj_firmware
  • lexmark cxtzj_firmware
  • lexmark cxnzj_firmware
  • lexmark cxtpp_firmware
  • lexmark cstpp_firmware
  • lexmark cstat_firmware
  • lexmark cxtat_firmware
  • lexmark cstmh_firmware
  • lexmark cxtmh_firmware
  • lexmark msnsn_firmware
  • lexmark mstsn_firmware
  • lexmark mxtsn_firmware
  • lexmark csngv_firmware
  • lexmark cstgv_firmware
  • lexmark cxtgv_firmware
  • lexmark ms610de
  • lexmark mx410
  • lexmark mx610
  • lexmark ms711
  • lexmark ms810de
  • lexmark ms812de
  • lexmark 6500e
  • lexmark mx710
  • lexmark ms911
  • lexmark mx910

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.