CVE-2016-3145

Severity: medium (CVSS 4.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-04-22 · updated 2026-06-17
Weakness: CWE-200

Description

Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on non-volatile memory.

Affected products

Lexmark Printer Firmware: from pp through pp.021.062; from cb through cb.021.062; from yk through yk.021.062; from yk through yk.021.057; from atl through atl.021.062

References

http://support.lexmark.com/index?page=content&id=TE760
http://support.lexmark.com/index?page=content&id=TE760

Get alerted when CVE-2016-3145 or the next vulnerability affects your stack