CVE-2023-50737: An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-02-28 · updated 2026-06-17
Weakness: CWE-20

Description

The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.

Affected products

Lexmark 6500E: through lhs60.jr.p763
Lexmark C2132: through lw90.vy4.p205
Lexmark C746: through lhs60.cm2.p763
Lexmark C925: through lhs60.hv.p763
Lexmark C950: through lhs60.tp.p763
Lexmark Cs317: through lw80.vyl.p249
Lexmark Cs417: through lw80.vy2.p249
Lexmark Cs748: through lhs60.cm4.p763
Lexmark Cs796: through lhs60.hc.p763
Lexmark Cslbl Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cslbn Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Csngv Firmware: through 222.030; from 230.001 through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Csnzj Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cstat Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cstgv Firmware: through 222.030; from 230.001 through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cstmh Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cstpc Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cstpp Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cstzj Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cx317: through lw80.gm2.p249
Lexmark Cxlbl Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cxlbn Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cxnzj Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cxtat Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cxtgv Firmware: through 222.030; from 230.001 through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cxtmh Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cxtmm Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cxtpc Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cxtpp Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203
Lexmark Cxtzj Firmware: through 230.041; from 230.075 through 230.078; from 230.200 through 230.203

References

Get alerted when CVE-2023-50737 or the next vulnerability affects your stack