CVE-2016-1896

Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.

CVSS v3 9.8 CRITICAL
CVSS v2.0 10.0 HIGH

9.8^/10

CVSS v3 : CRITICAL

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://support.lexmark.com/index?page=content&id=TE745	Vendor Advisory
http://support.lexmark.com/index?page=content&id=TE745	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:lexmark:printer_firmware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:lexmark:c4150::::::::
	cpe:2.3:h:lexmark:cs720de::::::::
	cpe:2.3:h:lexmark:cs720dte::::::::
	cpe:2.3:h:lexmark:cs725de::::::::
	cpe:2.3:h:lexmark:cs725dte::::::::

Configuration 2 (hide)

AND

cpe:2.3:o:lexmark:printer_firmware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:lexmark:cx725de::::::::
	cpe:2.3:h:lexmark:cx725dhe::::::::
	cpe:2.3:h:lexmark:cx725dthe::::::::
	cpe:2.3:h:lexmark:xc4150::::::::

Configuration 3 (hide)

AND

cpe:2.3:o:lexmark:printer_firmware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:lexmark:c6160::::::::
	cpe:2.3:h:lexmark:cs820de::::::::
	cpe:2.3:h:lexmark:cs820dte::::::::
	cpe:2.3:h:lexmark:cs820dtfe::::::::

Configuration 4 (hide)

AND

cpe:2.3:o:lexmark:printer_firmware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:lexmark:cx820de::::::::
	cpe:2.3:h:lexmark:cx820dtfe::::::::
	cpe:2.3:h:lexmark:cx825de::::::::
	cpe:2.3:h:lexmark:cx825dte::::::::
	cpe:2.3:h:lexmark:cx825dtfe::::::::
	cpe:2.3:h:lexmark:cx860de::::::::
	cpe:2.3:h:lexmark:cx860dte::::::::
	cpe:2.3:h:lexmark:cx860dtfe::::::::
	cpe:2.3:h:lexmark:xc6152de::::::::
	cpe:2.3:h:lexmark:xc6152dtfe::::::::
	cpe:2.3:h:lexmark:xc8155de::::::::
	cpe:2.3:h:lexmark:xc8155dte::::::::
	cpe:2.3:h:lexmark:xc8160de::::::::
	cpe:2.3:h:lexmark:xc8160dte::::::::

History

21 Nov 2024, 02:47

Type	Values Removed	Values Added
References	~~() http://support.lexmark.com/index?page=content&id=TE745 - Vendor Advisory~~	() http://support.lexmark.com/index?page=content&id=TE745 - Vendor Advisory

Information

Published : 2016-01-27 05:59

Updated : 2025-04-12 10:46

NVD link : CVE-2016-1896

Mitre link : CVE-2016-1896

CVE.ORG link : CVE-2016-1896

JSON object : View

Products Affected

lexmark

xc8160de
xc6152dtfe
cs820dtfe
cs720de
cs725de
cx860dtfe
cx825de
cx725dhe
cx725de
cx820de
xc8160dte
cx860de
cx820dtfe
cs720dte
cx860dte
xc4150
cx825dtfe
c6160
cs725dte
cx825dte
c4150
xc8155de
xc8155dte
cs820dte
cs820de
printer_firmware
xc6152de
cx725dthe

CWE

CWE-254

7PK - Security Features

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2016-1896", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2016-01-27T05:59:04.307", "references": [{"url": "http://support.lexmark.com/index?page=content&id=TE745", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://support.lexmark.com/index?page=content&id=TE745", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-254"}, {"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status."}, {"lang": "es", "value": "Condici\u00f3n de carrera en el proceso de inicializaci\u00f3n en impresoras Lexmark con firmware ATL en versiones anteriores a ATL.02.049, CB en versiones anteriores a CB.02.049, PP en versiones anteriores a PP.02.049 y YK en versiones anteriores a YK.02.049 permite a atacantes remotos eludir la autenticaci\u00f3n aprovechando una detecci\u00f3n incorrecta del estado del puente de seguridad."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lexmark:printer_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C29BEB30-DC3B-4922-9234-9F4CB9E2C048", "versionEndIncluding": "cb.02.048"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lexmark:c4150:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EF07C509-7E15-414C-9F1A-0DF8204136CC"}, {"criteria": "cpe:2.3:h:lexmark:cs720de:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0AD322C1-05F1-42AA-9F94-46F53E0529C0"}, {"criteria": "cpe:2.3:h:lexmark:cs720dte:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "11E85F1B-AE5F-4515-A5E0-5FAE4DF22228"}, {"criteria": "cpe:2.3:h:lexmark:cs725de:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F637ED5E-EBAA-42FA-B1EC-5A62BC35C1AA"}, {"criteria": "cpe:2.3:h:lexmark:cs725dte:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "36DF826B-6EE0-4C67-AB9C-56B86516EF07"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lexmark:printer_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46D65111-B7BC-4A60-83CB-0D3C2CF216DF", "versionEndIncluding": "atl.02.048"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lexmark:cx725de:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DE911CAA-BB40-462E-B7B1-08E6B8120536"}, {"criteria": "cpe:2.3:h:lexmark:cx725dhe:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "536113D5-F589-4EDA-A273-56B3E73450CC"}, {"criteria": "cpe:2.3:h:lexmark:cx725dthe:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2E4B5588-09A3-4FA2-81D0-715B52902B02"}, {"criteria": "cpe:2.3:h:lexmark:xc4150:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5BFB88AA-AA66-46E1-AA48-DA149E50A57C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lexmark:printer_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8CDC2CBD-3940-4952-8546-E6EA66C0725F", "versionEndIncluding": "yk.02.048"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lexmark:c6160:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B4E4434A-93AE-494E-8D46-4F7BE14AFFCB"}, {"criteria": "cpe:2.3:h:lexmark:cs820de:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7FF541E0-D4DA-4B4C-8870-D3EC59EC9F83"}, {"criteria": "cpe:2.3:h:lexmark:cs820dte:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B79F4035-1CEC-488F-9066-83E48D19CAA9"}, {"criteria": "cpe:2.3:h:lexmark:cs820dtfe:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8CC04B20-E795-49B2-8A84-1F559409D770"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:lexmark:printer_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB4760C3-77CB-4179-B7E9-79538C206498", "versionEndIncluding": "pp.02.048"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lexmark:cx820de:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B6CA052D-1DE0-45CC-8317-AE62D59179DA"}, {"criteria": "cpe:2.3:h:lexmark:cx820dtfe:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4AD59709-2F7D-402B-8BEB-39F254B5F92A"}, {"criteria": "cpe:2.3:h:lexmark:cx825de:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1751C220-21F2-4B00-BC83-4547C3EB549F"}, {"criteria": "cpe:2.3:h:lexmark:cx825dte:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AE9956F4-B90F-4DF2-A010-162DE39C1586"}, {"criteria": "cpe:2.3:h:lexmark:cx825dtfe:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7BA85370-DB44-4D02-AC9D-3F7732ABAF48"}, {"criteria": "cpe:2.3:h:lexmark:cx860de:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1D26F568-042D-4247-A728-933AF110BC51"}, {"criteria": "cpe:2.3:h:lexmark:cx860dte:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DCD0E198-C530-4FD3-AE96-5C75BDF2B7E7"}, {"criteria": "cpe:2.3:h:lexmark:cx860dtfe:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "43839086-5EA5-4FB6-B92D-378FECD3C9BD"}, {"criteria": "cpe:2.3:h:lexmark:xc6152de:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0B0403F7-39BD-463F-83A2-3722AD2568B0"}, {"criteria": "cpe:2.3:h:lexmark:xc6152dtfe:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4A553DB8-FA2D-4AFD-9B2D-96F52F90AECD"}, {"criteria": "cpe:2.3:h:lexmark:xc8155de:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "67CFD744-5BF8-4912-B9ED-68037528FDF4"}, {"criteria": "cpe:2.3:h:lexmark:xc8155dte:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "14DB6F86-9F8D-4065-BAFB-AF393FEDE24C"}, {"criteria": "cpe:2.3:h:lexmark:xc8160de:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "98059800-F8CE-4963-A3C8-7BFE2BEBE2A3"}, {"criteria": "cpe:2.3:h:lexmark:xc8160dte:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "806FECDA-5A28-46E8-8AEA-534560B58042"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}

9.8 /10

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0 /10

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

JSON object

Attach tags to CVE-2016-1896

9.8^/10

10.0^/10

Attach tags to `CVE-2016-1896`