CVE-2024-11344

A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.

CVSS v3 7.3 HIGH

7.3^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html

Configurations

No configuration.

History

13 Feb 2025, 19:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-02-13 19:15

Updated : 2025-02-13 19:15

NVD link : CVE-2024-11344

Mitre link : CVE-2024-11344

CVE.ORG link : CVE-2024-11344

JSON object : View

Products Affected

No product.

CWE

CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

{"id": "CVE-2024-11344", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "7bc73191-a2b6-4c63-9918-753964601853", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 3.9}]}, "published": "2025-02-13T19:15:13.020", "references": [{"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html", "source": "7bc73191-a2b6-4c63-9918-753964601853"}], "vulnStatus": "Received", "weaknesses": [{"type": "Secondary", "source": "7bc73191-a2b6-4c63-9918-753964601853", "description": [{"lang": "en", "value": "CWE-843"}]}], "descriptions": [{"lang": "en", "value": "A type confusion vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code."}], "lastModified": "2025-02-13T19:15:13.020", "sourceIdentifier": "7bc73191-a2b6-4c63-9918-753964601853"}

7.3 /10