Lexmark.Web.Server.fax_change_faxtrace_settings.Code.Execution

Description

This indicates an attack attempt to exploit a Remote Code Execution vulnerability in the Lexmark embedded Web Server.
The vulnerability is due to an error in the vulnerable application when handling a maliciously crafted request. A remote attacker can leverage the vulnerability to execute arbitrary code under the context of the SYSTEM user.

Affected Products

Any vulnerable Lexmark devices

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://publications.lexmark.com/publications/security-alerts/CVE-2023-26067.pdf

References