In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
SSRF
Cx820 Firmware
Cx825 Firmware
Cx860 Firmware
Xc4150 Firmware
+125
NVD
CVSS 3.1
9.8
EPSS
15.0%