Skip to content
Fencer Vulns
critical 9.1

CVE-2023-50737 json

An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.

published 2024-02-28 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-55493

cvss
9.1
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.0%
EPSS 1.0% chance of exploitation in 30 days, percentile 62%
public exploits
0
none known

Summary

The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.97% chance of exploitation in the next 30 days, higher than 62% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected products

  • Lexmark various
  • lexmark cxtpc_firmware
  • lexmark cstpc_firmware
  • lexmark mxtct_firmware
  • lexmark mxtpm_firmware
  • lexmark cxtmm_firmware
  • lexmark mslsg_firmware
  • lexmark mxlsg_firmware
  • lexmark mslbd_firmware
  • lexmark mxlbd_firmware
  • lexmark msngm_firmware
  • lexmark mstgm_firmware
  • lexmark mxngm_firmware
  • lexmark ms315
  • lexmark ms610dn
  • lexmark mxtgm_firmware
  • lexmark msngw_firmware
  • lexmark mstgw_firmware
  • lexmark mxtgw_firmware
  • lexmark cslbn_firmware
  • lexmark cslbl_firmware
  • lexmark cxlbn_firmware
  • lexmark cxlbl_firmware
  • lexmark cstzj_firmware
  • lexmark csnzj_firmware
  • lexmark cxtzj_firmware
  • lexmark cxnzj_firmware
  • lexmark cxtpp_firmware
  • lexmark cstpp_firmware
  • lexmark cstat_firmware
  • lexmark cxtat_firmware
  • lexmark cstmh_firmware
  • lexmark cxtmh_firmware
  • lexmark msnsn_firmware
  • lexmark mstsn_firmware
  • lexmark cx410
  • lexmark mxtsn_firmware
  • lexmark csngv_firmware
  • lexmark cstgv_firmware
  • lexmark cxtgv_firmware
  • lexmark ms610de
  • lexmark mx410
  • lexmark mx610
  • lexmark ms711
  • lexmark ms810de
  • lexmark ms812de
  • lexmark mx710
  • lexmark ms911
  • lexmark mx910
  • lexmark mx6500e

Classification

Weakness
  • CWE-20 Improper Input Validation

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.