CVE-2024-11346
Vulnérabilité élevée dans CX, XC, CS, MS, MX, XM, et. al. (Lexmark International)
CVSS 7.3 · Élevée
EPSS 0.4%
Lexmark International•CX, XC, CS, MS, MX, XM, et. al.•Versions : CSNZJ.240.200, CXNZJ.240.200, <=MXTPM.240.042, <=MXTLS.240.076, <=CXNZJ.240.042, CXTPC.240.200, MSTSN.240.200, CXTZJ.240.200, 0, <=CXLBL.230.401, <=LW90.VY4.P215, MXTLS.240.200, MSNGM.240.200, MSNSN.240.200, <=MSNGM.240.042, CXTGV.240.200, <=LW90.PR4.P215, <*, CXTMM.240.200, <=CSTMM.240.042, <=CSNZJ.240.042, <=LW80.VYL.P257, CSTPC.240.200, CSTMM.240.200, <=LW90.SB4.P215, CXTLS.240.200, <=MXLSG.230.401, <=LW80.SB2.P257, <=MXTSN.240.042, <=CXTMH.230.401, <=LW90.PR2.P215, MXTSN.240.200, <=CXTGV.240.042, CSTLS.240.200, <=CSTLS.240.076, <=CSLBL.230.401, <=MSLBD.230.401, <=CXLBN.230.401, <=CSLBN.230.401, <=LW90.TU.P215, <=LW90.SA.P215, <=LW90.MG.P215, <=CXTPC.240.042, <=CSTPC.240.042, CSNGV.240.200, <=LW90.TL2.P215, CSTZJ.240.200, <=MXLBD.230.401, <=LW90.SB7.P215, <=CSTPP.230.401, <=LW90.GM4.P215, <=CXTAT.230.401, MXTPM.240.200, <=CSTMH.230.401, <=MSNSN.240.042, <=LW80.VY2.P257, <=CSNGV.240.042, <=CSTGV.240.042, <=LW90.GM7.P215, <=LW80.PRL.P257, <=MSLSG.230.401, <=MXTCT.240.042, CSTGV.240.200, <=LW90.DN4.P215, <=CSTZJ.240.042, <=CXTPP.230.401, <=LW90.DN7.P215, <=CXTMM.240.042, <=CXTZJ.240.042, <=CSTAT.230.401, <=LW90.DN2.P215, <=LW80.GM2.P257, <=MSTSN.240.042, <=CXTLS.240.076, MXTCT.240.200
Description
: Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Resource Injection.This issue affects CX, XC, CS, et. Al.: from 001.001:0 through 081.231, from *.*.P001 through *.*.P233, from *.*.P001 through *.*.P759, from *.*.P001 through *.*.P836.
Gravité et risque d'exploitation
CVE-2024-11346 obtient un score CVSS de 7.3/10, soit une gravité élevée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.45 %, ce qui la place devant 37.6 % des CVE référencées.
Que faire ?
- Vérifiez si CX, XC, CS, MS, MX, XM, et. al. (versions CSNZJ.240.200, CXNZJ.240.200, <=MXTPM.240.042, <=MXTLS.240.076, <=CXNZJ.240.042, CXTPC.240.200, MSTSN.240.200, CXTZJ.240.200, 0, <=CXLBL.230.401, <=LW90.VY4.P215, MXTLS.240.200, MSNGM.240.200, MSNSN.240.200, <=MSNGM.240.042, CXTGV.240.200, <=LW90.PR4.P215, <*, CXTMM.240.200, <=CSTMM.240.042, <=CSNZJ.240.042, <=LW80.VYL.P257, CSTPC.240.200, CSTMM.240.200, <=LW90.SB4.P215, CXTLS.240.200, <=MXLSG.230.401, <=LW80.SB2.P257, <=MXTSN.240.042, <=CXTMH.230.401, <=LW90.PR2.P215, MXTSN.240.200, <=CXTGV.240.042, CSTLS.240.200, <=CSTLS.240.076, <=CSLBL.230.401, <=MSLBD.230.401, <=CXLBN.230.401, <=CSLBN.230.401, <=LW90.TU.P215, <=LW90.SA.P215, <=LW90.MG.P215, <=CXTPC.240.042, <=CSTPC.240.042, CSNGV.240.200, <=LW90.TL2.P215, CSTZJ.240.200, <=MXLBD.230.401, <=LW90.SB7.P215, <=CSTPP.230.401, <=LW90.GM4.P215, <=CXTAT.230.401, MXTPM.240.200, <=CSTMH.230.401, <=MSNSN.240.042, <=LW80.VY2.P257, <=CSNGV.240.042, <=CSTGV.240.042, <=LW90.GM7.P215, <=LW80.PRL.P257, <=MSLSG.230.401, <=MXTCT.240.042, CSTGV.240.200, <=LW90.DN4.P215, <=CSTZJ.240.042, <=CXTPP.230.401, <=LW90.DN7.P215, <=CXTMM.240.042, <=CXTZJ.240.042, <=CSTAT.230.401, <=LW90.DN2.P215, <=LW80.GM2.P257, <=MSTSN.240.042, <=CXTLS.240.076, MXTCT.240.200) est présent sur votre parc.
- Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
- À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
- Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.