Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on non-volatile memory.
References
Link | Resource |
---|---|
http://support.lexmark.com/index?page=content&id=TE760 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Configuration 5 (hide)
AND |
|
Information
Published : 2016-04-21 17:59
Updated : 2019-08-28 08:14
NVD link : CVE-2016-3145
Mitre link : CVE-2016-3145
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
lexmark
- cx820de
- cx820dtfe
- cx725dhe
- cs725de
- xc6152de
- cs720de
- xc8160dte
- cx860dte
- xc8160de
- cs725dte
- cs820dte
- cx725de
- c6160
- xc4150
- cx725dthe
- xc8155de
- c4150
- cx860de
- xc8155dte
- xc6152dtfe
- printer_firmware
- cx825dte
- cs820dtfe
- cs820de
- cx825de
- cs720dte
- cx860dtfe
- cx825dtfe