Every CVE Search/ Get API key

CVE-2022-29850

Various Lexmark products through 2022-04-27 allow External Control of a System or Configuration...

8.1 High

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.04%Up 0.2 points since Aug 26, 2022
90%50%10%1%

What each source reports

NVD Score used 8.1

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots.

Record
CVE-2022-29850
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20, CWE-668
Updated
2026-11-02
CVE List No score

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots.

Record
CVE-2022-29850
Updated
2026-11-02
EUVDEUVD-2022-34168 No score

Various Lexmark products through 2022-04-27 allow an attacker who has already compromised an affected Lexmark device to maintain persistence across reboots.

Record
EUVD-2022-34168
Updated
2026-11-03
GitHub AdvisoriesGHSA-79f9-xgx6-3cfm 8.1

Various Lexmark products through 2022-04-27 allow External Control of a System or Configuration...

Various Lexmark products through 2022-04-27 allow External Control of a System or Configuration Setting because of Improper Input Validation.

Record
GHSA-79f9-xgx6-3cfm
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02

Affected products

Show 105 moreShow less

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-29850 is a high vulnerability (CVSS 8.1) in Lexmark B2236 Firmware, published August 25, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.04%, the 64th percentile. No source names a fixed version.

References

MoveEnter Open