What’s Vulnerable › Vulnerabilities

CVE-2021-44736

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-01-20 · updated 2026-06-17
• Weakness: CWE-287

Description

The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” feature.

Affected products

• Lexmark Mc3224I Firmware: all versions

References

• https://support.lexmark.com/alerts/
• https://www.zerodayinitiative.com/advisories/ZDI-22-331/
• https://support.lexmark.com/alerts/
• https://www.zerodayinitiative.com/advisories/ZDI-22-331/

Get alerted when CVE-2021-44736 or the next vulnerability affects your stack