CVE-2025-9269 (GCVE-0-2025-9269)
Vulnerability from cvelistv5 – Published: 2025-09-09 17:21 – Updated: 2025-09-29 15:34
VLAI?
Summary
A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.
Severity ?
CWE
- CWE-918 - Server-Side Request Forgery (SSRF)
Assigner
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. |
Affected:
0 , ≤ CXTLS.250.199
(custom)
Affected: 0 , ≤ MXTLS.250.199 (custom) Affected: 0 , ≤ CSTLS.250.199 (custom) Affected: 0 , ≤ MSNSN.250.199 (custom) Affected: 0 , ≤ MSTSN.250.199 (custom) Affected: 0 , ≤ MXTSN.250.199 (custom) Affected: 0 , ≤ CSNGV.250.199 (custom) Affected: 0 , ≤ CSTGV.250.199 (custom) Affected: 0 , ≤ CXTGV.250.199 (custom) Affected: 0 , ≤ CXTPC.250.199 (custom) Affected: 0 , ≤ CSTPC.250.199 (custom) Affected: 0 , ≤ MXTCT.250.199 (custom) Affected: 0 , ≤ MXTPM.250.199 (custom) Affected: 0 , ≤ CXTMM.250.199 (custom) Affected: 0 , ≤ CSTMM.250.199 (custom) Affected: 0 , ≤ MSNGM.250.199 (custom) Affected: 0 , ≤ MSTGM.250.199 (custom) Affected: 0 , ≤ MXNGM.250.199 (custom) Affected: 0 , ≤ MXTGM.250.199 (custom) Affected: 0 , ≤ MSNGW.250.199 (custom) Affected: 0 , ≤ MSTGW.250.199 (custom) Affected: 0 , ≤ MXTGW.250.199 (custom) Affected: 0 , ≤ CSTZJ.250.199 (custom) Affected: 0 , ≤ CSNZJ.250.199 (custom) Affected: 0 , ≤ CXTZJ.250.199 (custom) Affected: 0 , ≤ CXNZJ.250.199 (custom) Affected: 0 , ≤ MSLSG.230.466 (custom) Affected: 0 , ≤ MXLSG.230.466 (custom) Affected: 0 , ≤ MSLBD.230.466 (custom) Affected: 0 , ≤ MXLBD.230.466 (custom) Affected: 0 , ≤ CSLBN.230.466 (custom) Affected: 0 , ≤ CSLBL.230.466 (custom) Affected: 0 , ≤ CXLBN.230.466 (custom) Affected: 0 , ≤ CXLBL.230.466 (custom) Affected: 0 , ≤ CXTPP.230.466 (custom) Affected: 0 , ≤ CSTPP.230.466 (custom) Affected: 0 , ≤ CSTAT.230.466 (custom) Affected: 0 , ≤ CXTAT.230.466 (custom) Affected: 0 , ≤ CSTMH.230.466 (custom) Affected: 0 , ≤ CXTMH.230.466 (custom) Affected: 0 , ≤ LW90.TL2.P224 (custom) Affected: 0 , ≤ LW90.PR2.P224 (custom) Affected: 0 , ≤ LW90.PR4.P224 (custom) Affected: 0 , ≤ LW90.SB4.P224 (custom) Affected: 0 , ≤ LW90.SB7.P224 (custom) Affected: 0 , ≤ LW90.DN2.P224 (custom) Affected: 0 , ≤ LW90.DN4.P224 (custom) Affected: 0 , ≤ LW90.DN7.P224 (custom) Affected: 0 , ≤ LW90.TU.P224 (custom) Affected: 0 , ≤ LW90.SA.P224 (custom) Affected: 0 , ≤ LW90.MG.P224 (custom) Affected: 0 , ≤ LW90.GM7.P224 (custom) Affected: 0 , ≤ LW90.GM4.P224 (custom) Affected: 0 , ≤ LW90.VY4.P224 (custom) Affected: 0 , ≤ LW80.PRL.P260 (custom) Affected: 0 , ≤ LW80.SB2.P260 (custom) Affected: 0 , ≤ LW80.VYL.P260 (custom) Affected: 0 , ≤ LW80.VY2.P260 (custom) Affected: 0 , ≤ LW80.GM2.P260 (custom) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-9269",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-09-09T17:43:57.556819Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-09-09T18:36:21.085Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"modules": [
"webserver"
],
"product": "CX, XC, CS, MS, MX, XM, et. al.",
"vendor": "Lexmark",
"versions": [
{
"changes": [
{
"at": "CXTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTLS.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTLS.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTSN.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTSN.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTGV.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTGV.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPC.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPC.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPC.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPC.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTCT.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTCT.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTPM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTPM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXNGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXNGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGM.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGM.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSNGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSNGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSTGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSTGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXTGW.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXTGW.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSNZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSNZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXNZJ.250.200 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXNZJ.250.199",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLSG.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLSG.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLSG.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLSG.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MSLBD.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MSLBD.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "MXLBD.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "MXLBD.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBN.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBN.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSLBL.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSLBL.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBN.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBN.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXLBL.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXLBL.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTPP.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTPP.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTPP.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTPP.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTAT.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTAT.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTAT.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTAT.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CSTMH.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CSTMH.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "CXTMH.230.467 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "CXTMH.230.466",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TL2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TL2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.PR4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.PR4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SB7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SB7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN2.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN2.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.DN7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.DN7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.TU.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.TU.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.SA.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.SA.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.MG.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.MG.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM7.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM7.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.GM4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.GM4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW90.VY4.P225 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW90.VY4.P224",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.PRL.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.PRL.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.SB2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.SB2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VYL.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VYL.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.VY2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.VY2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"changes": [
{
"at": "LW80.GM2.P261 and later",
"status": "unaffected"
}
],
"lessThanOrEqual": "LW80.GM2.P260",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server.\u0026nbsp;Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device."
}
],
"value": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server.\u00a0Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device."
}
],
"impacts": [
{
"capecId": "CAPEC-101",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-101 Server Side Include (SSI) Injection"
}
]
},
{
"capecId": "CAPEC-33",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-33: HTTP Request Smuggling"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-918",
"description": "CWE-918: Server-Side Request Forgery (SSRF)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-09-29T15:34:06.094Z",
"orgId": "7bc73191-a2b6-4c63-9918-753964601853",
"shortName": "Lexmark"
},
"references": [
{
"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Server-Side Request Forgery (SSRF) vulnerability found in embedded web server",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "7bc73191-a2b6-4c63-9918-753964601853",
"assignerShortName": "Lexmark",
"cveId": "CVE-2025-9269",
"datePublished": "2025-09-09T17:21:36.589Z",
"dateReserved": "2025-08-20T15:10:24.655Z",
"dateUpdated": "2025-09-29T15:34:06.094Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2025-9269\",\"sourceIdentifier\":\"7bc73191-a2b6-4c63-9918-753964601853\",\"published\":\"2025-09-09T18:15:36.993\",\"lastModified\":\"2025-09-11T17:14:25.240\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server.\u00a0Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"7bc73191-a2b6-4c63-9918-753964601853\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":6.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"LOW\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}]},\"weaknesses\":[{\"source\":\"7bc73191-a2b6-4c63-9918-753964601853\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-918\"}]}],\"references\":[{\"url\":\"https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html\",\"source\":\"7bc73191-a2b6-4c63-9918-753964601853\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-9269\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-09-09T17:43:57.556819Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-09-09T17:43:59.239Z\"}}], \"cna\": {\"title\": \"Server-Side Request Forgery (SSRF) vulnerability found in embedded web server\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"impacts\": [{\"capecId\": \"CAPEC-101\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-101 Server Side Include (SSI) Injection\"}]}, {\"capecId\": \"CAPEC-33\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-33: HTTP Request Smuggling\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 6.9, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"NONE\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"NONE\", \"subConfidentialityImpact\": \"LOW\", \"vulnConfidentialityImpact\": \"LOW\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Lexmark\", \"modules\": [\"webserver\"], \"product\": \"CX, XC, CS, MS, MX, XM, et. al.\", \"versions\": [{\"status\": \"affected\", \"changes\": [{\"at\": \"CXTLS.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTLS.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXTLS.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXTLS.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTLS.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTLS.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSNSN.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MSNSN.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSTSN.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MSTSN.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXTSN.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXTSN.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSNGV.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSNGV.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTGV.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTGV.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTGV.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTGV.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTPC.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTPC.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTPC.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTPC.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXTCT.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXTCT.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXTPM.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXTPM.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTMM.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTMM.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTMM.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTMM.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSNGM.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MSNGM.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSTGM.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MSTGM.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXNGM.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXNGM.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXTGM.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXTGM.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSNGW.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MSNGW.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSTGW.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MSTGW.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXTGW.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXTGW.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTZJ.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTZJ.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSNZJ.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSNZJ.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTZJ.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTZJ.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXNZJ.250.200 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXNZJ.250.199\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSLSG.230.467 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MSLSG.230.466\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXLSG.230.467 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXLSG.230.466\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MSLBD.230.467 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MSLBD.230.466\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"MXLBD.230.467 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"MXLBD.230.466\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSLBN.230.467 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSLBN.230.466\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSLBL.230.467 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSLBL.230.466\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXLBN.230.467 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXLBN.230.466\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXLBL.230.467 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXLBL.230.466\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTPP.230.467 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTPP.230.466\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTPP.230.467 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTPP.230.466\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTAT.230.467 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTAT.230.466\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTAT.230.467 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTAT.230.466\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CSTMH.230.467 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CSTMH.230.466\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"CXTMH.230.467 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"CXTMH.230.466\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.TL2.P225 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.TL2.P224\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.PR2.P225 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.PR2.P224\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.PR4.P225 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.PR4.P224\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.SB4.P225 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.SB4.P224\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.SB7.P225 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.SB7.P224\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.DN2.P225 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.DN2.P224\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.DN4.P225 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.DN4.P224\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.DN7.P225 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.DN7.P224\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.TU.P225 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.TU.P224\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.SA.P225 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.SA.P224\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.MG.P225 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.MG.P224\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.GM7.P225 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.GM7.P224\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.GM4.P225 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.GM4.P224\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW90.VY4.P225 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW90.VY4.P224\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW80.PRL.P261 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW80.PRL.P260\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW80.SB2.P261 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW80.SB2.P260\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW80.VYL.P261 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW80.VYL.P260\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW80.VY2.P261 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW80.VY2.P260\"}, {\"status\": \"affected\", \"changes\": [{\"at\": \"LW80.GM2.P261 and later\", \"status\": \"unaffected\"}], \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"LW80.GM2.P260\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html\"}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server.\\u00a0Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server.\u0026nbsp;Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-918\", \"description\": \"CWE-918: Server-Side Request Forgery (SSRF)\"}]}], \"providerMetadata\": {\"orgId\": \"7bc73191-a2b6-4c63-9918-753964601853\", \"shortName\": \"Lexmark\", \"dateUpdated\": \"2025-09-29T15:34:06.094Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-9269\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-09-29T15:34:06.094Z\", \"dateReserved\": \"2025-08-20T15:10:24.655Z\", \"assignerOrgId\": \"7bc73191-a2b6-4c63-9918-753964601853\", \"datePublished\": \"2025-09-09T17:21:36.589Z\", \"assignerShortName\": \"Lexmark\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…