{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-11345","assignerOrgId":"7bc73191-a2b6-4c63-9918-753964601853","state":"PUBLISHED","assignerShortName":"Lexmark","dateReserved":"2024-11-18T16:10:40.070Z","datePublished":"2025-02-13T18:46:33.859Z","dateUpdated":"2025-02-13T19:19:43.200Z"},"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"CX, XC, CS, MS, MX, XM, et. al.","vendor":"Lexmark International","versions":[{"changes":[{"at":"CXTLS.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CXTLS.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTLS.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CSTLS.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSNSN.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MSNSN.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSTSN.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MSTSN.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXTSN.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MXTSN.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSNGV.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CSNGV.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTGV.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CSTGV.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTGV.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CXTGV.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTPC.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CXTPC.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTPC.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CSTPC.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXTCT.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MXTCT.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXTPM.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MXTPM.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTMM.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CXTMM.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTMM.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CSTMM.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSLSG.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MSLSG.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXLSG.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MXLSG.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSLBD.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MSLBD.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXLBD.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MXLBD.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSNGM.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MSNGM.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSTGM.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MSTGM.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXNGM.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MXNGM.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXTGM.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MXTGM.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSNGW.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MSNGW.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSTGW.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MSTGW.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXTGW.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"MXTGW.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSLBN.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CSLBN.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSLBL.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CSLBL.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXLBN.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CXLBN.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXLBL.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CXLBL.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTZJ.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CSTZJ.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSNZJ.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CSNZJ.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTZJ.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CXTZJ.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXNZJ.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CXNZJ.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTPP.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CXTPP.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTPP.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CSTPP.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTAT.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CSTAT.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTAT.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CXTAT.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTMH.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CSTMH.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTMH.230.342 and later","status":"unaffected"}],"lessThanOrEqual":"CXTMH.230.341","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.TL2.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.TL2.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.PR2.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.PR2.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.PR4.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.PR4.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.SB4.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.SB4.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.SB7.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.SB7.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.DN2.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.DN2.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.DN4.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.DN4.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.DN7.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.DN7.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.TU.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.TU.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.SA.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.SA.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.MG.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.MG.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.GM7.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.GM7.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.GM4.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.GM4.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW80.PRL.P258 and later","status":"unaffected"}],"lessThanOrEqual":"LW80.PRL.P257","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW80.SB2.P258 and later","status":"unaffected"}],"lessThanOrEqual":"LW80.SB2.P257","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW80.VYL.P258 and later","status":"unaffected"}],"lessThanOrEqual":"LW80.VYL.P257","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW80.VY2.P258 and later","status":"unaffected"}],"lessThanOrEqual":"LW80.VY2.P257","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW80.GM2.P258 and later","status":"unaffected"}],"lessThanOrEqual":"LW80.GM2P257","status":"affected","version":"0","versionType":"custom"}]}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.<br></p>"}],"value":"A heap-based memory vulnerability has been identified in the Postscript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code."}],"impacts":[{"capecId":"CAPEC-100","descriptions":[{"lang":"en","value":"CAPEC-100 Overflow Buffers"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write","lang":"en","type":"CWE"}]}],"providerMetadata":{"orgId":"7bc73191-a2b6-4c63-9918-753964601853","shortName":"Lexmark","dateUpdated":"2025-02-13T18:46:33.859Z"},"references":[{"url":"https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Lexmark recommends a firmware update if your device has affected firmware.\n\n<br>"}],"value":"Lexmark recommends a firmware update if your device has affected firmware."}],"source":{"discovery":"UNKNOWN"},"title":"Heap-based memory vulnerability in the Postscript interpreter in various Lexmark devices","x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-13T19:16:54.572367Z","id":"CVE-2024-11345","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-02-13T19:19:43.200Z"}}]}}