CVE-2025-65078Untrusted search path vulnerability in Embedded Solutions Framework
Updated under an hour ago ()
Does this affect you?
It affects Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code.
lexmark:mxtct_msngm_mstgm_mxngm_mxtgm_csngv_cstgv_cxtgv_msngw_mstgw_mxtgw_cstls_cxtls_mxtls_cstmm_cxtmm_cstpc_cxtpc_mxtpm_msnsn_mstsn_mxtsn_csnzj_cstzj_cxnzj_cxtzj (from the name)
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.
Printed from infosecsignals.com. Every record links back to the agency that published it.
Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.