CVE-2023-23560

—

CVSS 3.1

9.8 critical

EPSS

14%p96

Published

Jan 23, 2023 (Jan 23, 2023)

Modified

Jun 17, 2026

Description

In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.

Vendors: lexmark
Products: b2236 firmware, b2338 firmware, b2442 firmware, b2546 firmware, b2650 firmware, b2865 firmware, b3340 firmware, b3442 firmware, c2240 firmware, c2325 firmware, c2326 firmware, c2425 firmware
Weakness: CWE-918, CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news1 stories