« Volver al listado

CVE-2021-35469

Estado: ModificadaAlta (7.8)—

The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry that has an unquoted service path.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Lexmark — Printer Software G2Lexmark — Printer Software G3Lexmark — Printer Software G4

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-35469",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-07-14T12:15:09.863",
  "references": [
    {
      "url": "http://support.lexmark.com/alerts/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.lexmark.com/index?id=TE952&page=content&locale=en&userlocale=EN_US",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://support.lexmark.com/alerts/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.lexmark.com/index?id=TE952&page=content&locale=en&userlocale=EN_US",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-428"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry that has an unquoted service path."
    },
    {
      "lang": "es",
      "value": "Los paquetes de Instalación del Software de impresoras Lexmark G2, G3 y G4, presentan una vulnerabilidad de escalada local de privilegios debido a una entrada del registro que presenta una ruta de servicio no citada"
    }
  ],
  "lastModified": "2026-06-17T03:57:31.803",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:lexmark:printer_software_g2:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24E98B10-D890-4AF9-B6C1-B1529B3A7492",
              "versionEndIncluding": "1.8.0.0"
            },
            {
              "criteria": "cpe:2.3:a:lexmark:printer_software_g3:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E3C54E5-87A5-450B-B22E-C8BB9E5DE4EA",
              "versionEndIncluding": "1.2.0.0"
            },
            {
              "criteria": "cpe:2.3:a:lexmark:printer_software_g4:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79F41060-9F47-4DCA-8A1A-7B365123A517",
              "versionEndIncluding": "1.3.0.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}