CVE-2023-40239

Summary

CVE-2023-40239 is a vulnerability affecting certain Lexmark devices, including the CS310 model, before August 25, 2023. This issue enables XXE (XML External Entity) attacks, which could result in information disclosure. To mitigate this risk, users must upgrade their device's firmware to LW80.*.P246 or a higher version. Each product family may have a unique full version specification, so it is essential to obtain the appropriate firmware update for your specific Lexmark device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.