CVE-2016-1896

Published: Jan 27, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.

Affected (4)

Products: Lexmark: Printer Firmware

Lexmark

1 product

Printer Firmware

Configuration A

1 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Lexmark Printer Firmware	Up to cb.02.048

Running on/with	Platform Versions
Lexmark C4150	All versions
Lexmark Cs720de	All versions
Lexmark Cs720dte	All versions
Lexmark Cs725de	All versions
Lexmark Cs725dte	All versions

Configuration B

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Lexmark Printer Firmware	Up to atl.02.048

Running on/with	Platform Versions
Lexmark Cx725de	All versions
Lexmark Cx725dhe	All versions
Lexmark Cx725dthe	All versions
Lexmark Xc4150	All versions

Configuration C

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Lexmark Printer Firmware	Up to yk.02.048

Running on/with	Platform Versions
Lexmark C6160	All versions
Lexmark Cs820de	All versions
Lexmark Cs820dte	All versions
Lexmark Cs820dtfe	All versions

Configuration D

1 vulnerable · 14 platform

Vulnerable Software	Affected Versions
Lexmark Printer Firmware	Up to pp.02.048

Running on/with	Platform Versions
Lexmark Cx820de	All versions
Lexmark Cx820dtfe	All versions
Lexmark Cx825de	All versions
Lexmark Cx825dte	All versions
Lexmark Cx825dtfe	All versions
Lexmark Cx860de	All versions
Lexmark Cx860dte	All versions
Lexmark Cx860dtfe	All versions
Lexmark Xc6152de	All versions
Lexmark Xc6152dtfe	All versions
Lexmark Xc8155de	All versions
Lexmark Xc8155dte	All versions
Lexmark Xc8160de	All versions
Lexmark Xc8160dte	All versions

Related CWEs

CWE-254

CWE-264

References (2)

http://support.lexmark.com/index?page=content&id=TE745

Source: cve@mitre.org

Vendor Advisory

http://support.lexmark.com/index?page=content&id=TE745

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.