CVE-2016-1896 Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypas...
CriticalCVSS 9.8
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lexmark printer firmware | <= cb.02.048 | No fix listed |
| lexmark printer firmware | <= atl.02.048 | No fix listed |
| lexmark printer firmware | <= yk.02.048 | No fix listed |
| lexmark printer firmware | <= pp.02.048 | No fix listed |
References
- support.lexmark.com vendor-advisory