{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-11347","assignerOrgId":"7bc73191-a2b6-4c63-9918-753964601853","state":"PUBLISHED","assignerShortName":"Lexmark","dateReserved":"2024-11-18T16:10:43.479Z","datePublished":"2025-02-13T18:55:22.943Z","dateUpdated":"2025-02-13T19:09:37.473Z"},"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","modules":["Postscript interpreter"],"product":"CX, XC, CS, et. al.","vendor":"Lexmark International","versions":[{"changes":[{"at":"CXTLS.240.077 - CXTLS.240.199","status":"unaffected"}],"lessThanOrEqual":"CXTLS.240.076","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTLS.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"CXTLS.240.200","versionType":"custom"},{"changes":[{"at":"MXTLS.240.077 - MXTLS.240.199","status":"unaffected"}],"lessThanOrEqual":"MXTLS.240.076","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXTLS.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"MXTLS.240.200","versionType":"custom"},{"changes":[{"at":"CSTLS.240.077 - CSTLS.240.199","status":"unaffected"}],"lessThanOrEqual":"CSTLS.240.076","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTLS.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"CSTLS.240.200","versionType":"custom"},{"changes":[{"at":"MSNSN.240.043 - MSNSN.240.069","status":"unaffected"}],"lessThanOrEqual":"MSNSN.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSNSN.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"MSNSN.240.200","versionType":"custom"},{"changes":[{"at":"MSTSN.240.043 - MSTSN.240.069","status":"unaffected"}],"lessThanOrEqual":"MSTSN.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSTSN.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"MSTSN.240.200","versionType":"custom"},{"changes":[{"at":"MXTSN.240.043 - MXTSN.240.069","status":"unaffected"}],"lessThanOrEqual":"MXTSN.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXTSN.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"MXTSN.240.200","versionType":"custom"},{"changes":[{"at":"CSNGV.240.043 - CSNGV.240.069","status":"unaffected"}],"lessThanOrEqual":"CSNGV.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSNGV.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"CSNGV.240.200","versionType":"custom"},{"changes":[{"at":"CSTGV.240.043 - CSTGV.240.069","status":"unaffected"}],"lessThanOrEqual":"CSTGV.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTGV.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"CSTGV.240.200","versionType":"custom"},{"changes":[{"at":"CXTGV.240.043 - CXTGV.240.069","status":"unaffected"}],"lessThanOrEqual":"CXTGV.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTGV.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"CXTGV.240.200","versionType":"custom"},{"changes":[{"at":"CXTPC.240.043 - CXTPC.240.069","status":"unaffected"}],"lessThanOrEqual":"CXTPC.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTPC.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"CXTPC.240.200","versionType":"custom"},{"changes":[{"at":"CSTPC.240.043 - CSTPC.240.069","status":"unaffected"}],"lessThanOrEqual":"CSTPC.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTPC.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"CSTPC.240.200","versionType":"custom"},{"changes":[{"at":"MXTCT.240.043 - MXTCT.240.069","status":"unaffected"}],"lessThanOrEqual":"MXTCT.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXTCT.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"MXTCT.240.200","versionType":"custom"},{"changes":[{"at":"MXTPM.240.043-MXTPM.240.069","status":"unaffected"}],"lessThanOrEqual":"MXTPM.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXTPM.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"MXTPM.240.200","versionType":"custom"},{"changes":[{"at":"CXTMM.240.043-CXTMM.240.069","status":"unaffected"}],"lessThanOrEqual":"CXTMM.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTMM.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"CXTMM.240.200","versionType":"custom"},{"changes":[{"at":"CSTMM.240.043 - CSTMM.240.069","status":"unaffected"}],"lessThanOrEqual":"CSTMM.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTMM.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"CSTMM.240.200","versionType":"custom"},{"changes":[{"at":"CSTZJ.240.043 - CSTZJ.240.069","status":"unaffected"}],"lessThanOrEqual":"CSTZJ.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTZJ.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"CSTZJ.240.200","versionType":"custom"},{"changes":[{"at":"CSNZJ.240.043 - CSNZJ.240.069","status":"unaffected"}],"lessThanOrEqual":"CSNZJ.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSNZJ.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"CSNZJ.240.200","versionType":"custom"},{"changes":[{"at":"CXTZJ.240.043 - CXTZJ.240.069","status":"unaffected"}],"lessThanOrEqual":"CXTZJ.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTZJ.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"CXTZJ.240.200","versionType":"custom"},{"changes":[{"at":"CXNZJ.240.043 - CXNZJ.240.069","status":"unaffected"}],"lessThanOrEqual":"CXNZJ.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXNZJ.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"CXNZJ.240.200","versionType":"custom"},{"changes":[{"at":"MSNGM.240.043 - MSNGM.240.069","status":"unaffected"}],"lessThanOrEqual":"MSNGM.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSNGM.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"MSNGM.240.200","versionType":"custom"},{"changes":[{"at":"MSTGM.240.043 - MSTGM.240.069","status":"unaffected"}],"lessThanOrEqual":"MSTGM.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSTGM.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"MSTGM.240.200","versionType":"custom"},{"changes":[{"at":"MXNGM.240.043 - MXNGM.240.069","status":"unaffected"}],"lessThanOrEqual":"MXNGM.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXNGM.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"MXNGM.240.200","versionType":"custom"},{"changes":[{"at":"MXTGM.240.043 - MXTGM.240.069","status":"unaffected"}],"lessThanOrEqual":"MXTGM.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXTGM.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"MXTGM.240.200","versionType":"custom"},{"changes":[{"at":"MSNGW.240.043 - MSNGW.240.069","status":"unaffected"}],"lessThanOrEqual":"MSNGW.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSNGW.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"MSNGW.240.200","versionType":"custom"},{"changes":[{"at":"MSTGW.240.043 - MSTGW.240.069","status":"unaffected"}],"lessThanOrEqual":"MSTGW.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSTGW.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"MSTGW.240.200","versionType":"custom"},{"changes":[{"at":"MXTGW.240.043 - MXTGW.240.069","status":"unaffected"}],"lessThanOrEqual":"MXTGW.240.042","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXTGW.240.201 and later","status":"unaffected"}],"lessThan":"*","status":"affected","version":"MXTGW.240.200","versionType":"custom"},{"changes":[{"at":"MSLSG.230.402 and later","status":"unaffected"}],"lessThanOrEqual":"MSLSG.230.401","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXLSG.230.402 and later","status":"unaffected"}],"lessThanOrEqual":"MXLSG.230.401","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MSLBD.230.402 and later","status":"unaffected"}],"lessThanOrEqual":"MSLBD.230.401","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"MXLBD.230.402 and later","status":"unaffected"}],"lessThanOrEqual":"MXLBD.230.401","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSLBN.230.402 and later","status":"unaffected"}],"lessThanOrEqual":"CSLBN.230.401","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSLBL.230.402 and later","status":"unaffected"}],"lessThanOrEqual":"CSLBL.230.401","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXLBN.230.402 and later","status":"unaffected"}],"lessThanOrEqual":"CXLBN.230.401","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXLBL.230.402 and later","status":"unaffected"}],"lessThanOrEqual":"CXLBL.230.401","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTPP.230.402 and later","status":"unaffected"}],"lessThanOrEqual":"CXTPP.230.401","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTPP.230.402 and later","status":"unaffected"}],"lessThanOrEqual":"CSTPP.230.401","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTAT.230.402 and later","status":"unaffected"}],"lessThanOrEqual":"CSTAT.230.401","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTAT.230.402 and later","status":"unaffected"}],"lessThanOrEqual":"CXTAT.230.401","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CSTMH.230.402 and later","status":"unaffected"}],"lessThanOrEqual":"CSTMH.230.401","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"CXTMH.230.402 and later","status":"unaffected"}],"lessThanOrEqual":"CXTMH.230.401","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.TL2.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.TL2.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.PR2.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.PR2.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.PR4.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.PR4.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.SB4.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.SB4.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.SB7.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.SB7.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.DN2.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.DN2.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.DN4.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.DN4.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.DN7.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.DN7.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.TU.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.TU.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.SA.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.SA.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.MG.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.MG.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.GM7.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.GM7.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.GM4.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.GM4.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW90.VY4.P216 and later","status":"unaffected"}],"lessThanOrEqual":"LW90.VY4.P215","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW80.PRL.P258 and later","status":"unaffected"}],"lessThanOrEqual":"LW80.PRL.P257","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW80.SB2.P258 and later","status":"unaffected"}],"lessThanOrEqual":"LW80.SB2.P257","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW80.VYL.P258 and later","status":"unaffected"}],"lessThanOrEqual":"LW80.VYL.P257","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW80.VY2.P258 and later","status":"unaffected"}],"lessThanOrEqual":"LW80.VY2.P257","status":"affected","version":"0","versionType":"custom"},{"changes":[{"at":"LW80.GM2.P258 and later","status":"unaffected"}],"lessThanOrEqual":"LW80.GM2.P257","status":"affected","version":"0","versionType":"custom"}]}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.<p>The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.</p>"}],"value":"Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."}],"impacts":[{"capecId":"CAPEC-92","descriptions":[{"lang":"en","value":"CAPEC-92 Forced Integer Overflow"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-190","description":"CWE-190 Integer Overflow or Wraparound","lang":"en","type":"CWE"}]}],"providerMetadata":{"orgId":"7bc73191-a2b6-4c63-9918-753964601853","shortName":"Lexmark","dateUpdated":"2025-02-13T18:55:22.943Z"},"references":[{"url":"https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"}],"source":{"discovery":"UNKNOWN"},"title":"Access of Resource Using Incompatible Type in Postscript interpreter","workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Lexmark recommends a firmware update if your device has affected firmware."}],"value":"Lexmark recommends a firmware update if your device has affected firmware."}],"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-02-13T19:08:51.804229Z","id":"CVE-2024-11347","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-02-13T19:09:37.473Z"}}]}}