What’s Vulnerable › Vulnerabilities
CVE-2023-40239
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-09-01 · updated 2026-06-17
- Weakness: CWE-611
Description
Certain Lexmark devices (such as CS310) before 2023-08-25 allow XXE attacks, leading to information disclosure. The fixed firmware version is LW80.*.P246, i.e., '*' indicates that the full version specification varies across product model family, but firmware level P246 (or higher) is required to remediate the vulnerability.
Affected products
- Lexmark C2132 Firmware: through lw80.vy4.p245
- Lexmark Cs310 Firmware: through lw80.vyl.p245
- Lexmark Cs317 Firmware: through lw80.vyl.p245
- Lexmark Cs410 Firmware: through lw80.vy2.p245
- Lexmark Cs417 Firmware: through lw80.vy2.p245
- Lexmark Cs510 Firmware: through lw80.vy4.p245
- Lexmark Cs517 Firmware: through lw80.vy4.p245
- Lexmark Cx310 Firmware: through lw80.gm2.p245
- Lexmark Cx317 Firmware: through lw80.gm2.p245
- Lexmark Cx410 Firmware: through lw80.gm4.p245
- Lexmark Cx417 Firmware: through lw80.gm4.p245
- Lexmark Cx510 Firmware: through lw80.gm7.p245
- Lexmark Cx517 Firmware: through lw80.gm7.p245
- Lexmark M1140+ Firmware: through lw80.pr2.p245
- Lexmark M1140 Firmware: through lw80.prl.p245
- Lexmark M1145 Firmware: through lw80.pr2.p245
- Lexmark M3150De Firmware: through lw80.pr4.p245
- Lexmark M3150Dn Firmware: through lw80.pr2.p245
- Lexmark M5155 Firmware: through lw80.dn4.p245
- Lexmark M5163De Firmware: through lw80.dn4.p245
- Lexmark M5163Dn Firmware: through lw80.dn2.p245
- Lexmark M5170 Firmware: through lw80.dn7.p245
- Lexmark Ms310 Firmware: through lw80.prl.p245
- Lexmark Ms312 Firmware: through lw80.prl.p245
- Lexmark Ms315 Firmware: through lw80.tl2.p245
- Lexmark Ms317 Firmware: through lw80.prl.p245
- Lexmark Ms410 Firmware: through lw80.prl.p245
- Lexmark Ms415 Firmware: through lw80.tl2.p245
- Lexmark Ms417 Firmware: through lw80.tl2.p245
- Lexmark Ms510 Firmware: through lw80.pr2.p245
References
- https://publications.lexmark.com/publications/security-alerts/CVE-2023-40239.pdf
- https://publications.lexmark.com/publications/security-alerts/CVE-2023-40239.pdf
Get alerted when CVE-2023-40239 or the next vulnerability affects your stack