What’s Vulnerable › Vulnerabilities

CVE-2022-29850

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-08-26 · updated 2026-06-17
• Weakness: CWE-20

Description

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots.

Affected products

• Lexmark B2236 Firmware: before mslsg.081.014 — fixed in mslsg.081.014
• Lexmark B2338 Firmware: before msngm.081.014 — fixed in msngm.081.014
• Lexmark B2442 Firmware: before msngm.081.014 — fixed in msngm.081.014
• Lexmark B2546 Firmware: before msngm.081.014 — fixed in msngm.081.014
• Lexmark B2650 Firmware: before msngm.081.014 — fixed in msngm.081.014
• Lexmark B2865 Firmware: before msngw.081.014 — fixed in msngw.081.014
• Lexmark B3340 Firmware: before mslbd.081.014 — fixed in mslbd.081.014
• Lexmark B3442 Firmware: before mslbd.081.014 — fixed in mslbd.081.014
• Lexmark C2240 Firmware: before cstzj.081.014 — fixed in cstzj.081.014
• Lexmark C2325 Firmware: before csnzj.081.014 — fixed in csnzj.081.014
• Lexmark C2326 Firmware: before cslbn.081.014 — fixed in cslbn.081.014
• Lexmark C2425 Firmware: before csnzj.081.014 — fixed in csnzj.081.014
• Lexmark C2535 Firmware: before csnzj.081.014 — fixed in csnzj.081.014
• Lexmark C3224 Firmware: before cslbn.081.014 — fixed in cslbn.081.014
• Lexmark C3326 Firmware: before cslbn.081.014 — fixed in cslbn.081.014
• Lexmark C3426 Firmware: before cslbn.081.014 — fixed in cslbn.081.014
• Lexmark C4150 Firmware: before cstat.081.014 — fixed in cstat.081.014
• Lexmark C6160 Firmware: before cstpp.081.014 — fixed in cstpp.081.014
• Lexmark C9235 Firmware: before cstmh.081.014 — fixed in cstmh.081.014
• Lexmark Cs331 Firmware: before cslbn.081.014 — fixed in cslbn.081.014
• Lexmark Cs421 Firmware: before csnzj.081.014 — fixed in csnzj.081.014
• Lexmark Cs431 Firmware: before cslbn.081.014 — fixed in cslbn.081.014
• Lexmark Cs439 Firmware: before cslbn.081.014 — fixed in cslbn.081.014
• Lexmark Cs521 Firmware: before csnzj.081.014 — fixed in csnzj.081.014
• Lexmark Cs622 Firmware: before cstzj.081.014 — fixed in cstzj.081.014
• Lexmark Cs720 Firmware: before cstat.081.014 — fixed in cstat.081.014
• Lexmark Cs725 Firmware: before cstat.081.014 — fixed in cstat.081.014
• Lexmark Cs727 Firmware: before cstat.081.014 — fixed in cstat.081.014
• Lexmark Cs728 Firmware: before cstat.081.014 — fixed in cstat.081.014
• Lexmark Cs820 Firmware: before cstpp.081.014 — fixed in cstpp.081.014

How to fix

Upgrade to a fixed version: Lexmark B2236 Firmware mslsg.081.014; Lexmark B2338 Firmware msngm.081.014; Lexmark B2442 Firmware msngm.081.014; Lexmark B2546 Firmware msngm.081.014; Lexmark B2650 Firmware msngm.081.014; Lexmark B2865 Firmware msngw.081.014; Lexmark B3340 Firmware mslbd.081.014; Lexmark B3442 Firmware mslbd.081.014; Lexmark C2240 Firmware cstzj.081.014; Lexmark C2325 Firmware csnzj.081.014; Lexmark C2326 Firmware cslbn.081.014; Lexmark C2425 Firmware csnzj.081.014. Check the vendor advisory for mitigations.

References

• https://publications.lexmark.com/publications/security-alerts/CVE-2022-29850.pdf
• https://support.lexmark.com/alerts/
• https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
• https://publications.lexmark.com/publications/security-alerts/CVE-2022-29850.pdf
• https://support.lexmark.com/alerts/
• https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html

Get alerted when CVE-2022-29850 or the next vulnerability affects your stack