Path Traversal in Lexmark Cstat, Cxtat, Mslbd, Mxlbd, Cslbl, Cxlbl, Cslbn, Cxlbn, Cstmh, Cxtmh, Cstpp, Cxtpp, Mslsg, Mxlsg
CVE-2025-65077
A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.006 (45.9th percentile) — read the EPSS interpretation.
Affected products
- Lexmark Cstat, Cxtat, Mslbd, Mxlbd, Cslbl, Cxlbl, Cslbn, Cxlbn, Cstmh, Cxtmh, Cstpp, Cxtpp, Mslsg, Mxlsg — versions 0
- Lexmark Mxtct, Msngm, Mstgm, Mxngm, Mxtgm, Csngv, Cstgv, Cxtgv, Msngw, Mstgw, Mxtgw, Cstls, Cxtls, Mxtls, Cstmm, Cxtmm, Cstpc, Cxtpc, Mxtpm, Msnsn, Mstsn, Mxtsn, Csnzj, Cstzj, Cxnzj, Cxtzj — versions 0