CVE-2016-1896

Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2016-01-27

Last modified

2024-08-05

Weaknesses

CWE-254, CWE-264

Affected products

• Printer Firmware (Lexmark)

References

• http://support.lexmark.com/index?page=content&id=TE745