CVE-2023-23560
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input...
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.
- Record
CVE-2023-23560- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-918, CWE-20
- Updated
- 2026-11-02
CVE List
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.
- Record
CVE-2023-23560- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2023-27660
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.
- Record
EUVD-2023-27660- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-fj75-7hqx-qp2c
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input...
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.
- Record
GHSA-fj75-7hqx-qp2c- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20, CWE-918
- Updated
- 2026-11-02
Affected products
- lexmark b2236 firmware
- lexmark b2338 firmware
- lexmark b2442 firmware
- lexmark b2546 firmware
- lexmark b2650 firmware
- lexmark b2865 firmware
- lexmark b3340 firmware
- lexmark b3442 firmware
- lexmark c2240 firmware
- lexmark c2325 firmware
- lexmark c2326 firmware
- lexmark c2425 firmware
Show 116 moreShow less
- lexmark c2535 firmware
- lexmark c3224 firmware
- lexmark c3326 firmware
- lexmark c3426 firmware
- lexmark c4150 firmware
- lexmark c6160 firmware
- lexmark c9235 firmware
- lexmark cs331 firmware
- lexmark cs421 firmware
- lexmark cs431 firmware
- lexmark cs439 firmware
- lexmark cs521 firmware
- lexmark cs622 firmware
- lexmark cs720 firmware
- lexmark cs725 firmware
- lexmark cs727 firmware
- lexmark cs728 firmware
- lexmark cs820 firmware
- lexmark cs827 firmware
- lexmark cs921 firmware
- lexmark cs923 firmware
- lexmark cs927 firmware
- lexmark cx331 firmware
- lexmark cx421 firmware
- lexmark cx431 firmware
- lexmark cx522 firmware
- lexmark cx622 firmware
- lexmark cx625 firmware
- lexmark cx725 firmware
- lexmark cx727 firmware
- lexmark cx820 firmware
- lexmark cx825 firmware
- lexmark cx860 firmware
- lexmark cx920 firmware
- lexmark cx921 firmware
- lexmark cx922 firmware
- lexmark cx923 firmware
- lexmark cx924 firmware
- lexmark cx944 firmware
- lexmark m1242 firmware
- lexmark m1246 firmware
- lexmark m1342 firmware
- lexmark m3250 firmware
- lexmark m5255 firmware
- lexmark m5270 firmware
- lexmark mb2236 firmware
- lexmark mb2338 firmware
- lexmark mb2442 firmware
- lexmark mb2546 firmware
- lexmark mb2650 firmware
- lexmark mb2770 firmware
- lexmark mb3442 firmware
- lexmark mc2325 firmware
- lexmark mc2425 firmware
- lexmark mc2535 firmware
- lexmark mc2640 firmware
- lexmark mc3224 firmware
- lexmark mc3326 firmware
- lexmark mc3426 firmware
- lexmark ms321 firmware
- lexmark ms331 firmware
- lexmark ms421 firmware
- lexmark ms431 firmware
- lexmark ms521 firmware
- lexmark ms621 firmware
- lexmark ms622 firmware
- lexmark ms725 firmware
- lexmark ms821 firmware
- lexmark ms822 firmware
- lexmark ms823 firmware
- lexmark ms825 firmware
- lexmark ms826 firmware
- lexmark mx321 firmware
- lexmark mx331 firmware
- lexmark mx421 firmware
- lexmark mx431 firmware
- lexmark mx432 firmware
- lexmark mx521 firmware
- lexmark mx522 firmware
- lexmark mx622 firmware
- lexmark mx721 firmware
- lexmark mx722 firmware
- lexmark mx822 firmware
- lexmark mx826 firmware
- lexmark mx931 firmware
- lexmark xc2235 firmware
- lexmark xc2326 firmware
- lexmark xc4140 firmware
- lexmark xc4143 firmware
- lexmark xc4150 firmware
- lexmark xc4153 firmware
- lexmark xc4240 firmware
- lexmark xc4342 firmware
- lexmark xc4352 firmware
- lexmark xc6152 firmware
- lexmark xc6153 firmware
- lexmark xc8155 firmware
- lexmark xc8160 firmware
- lexmark xc8163 firmware
- lexmark xc9225 firmware
- lexmark xc9235 firmware
- lexmark xc9245 firmware
- lexmark xc9255 firmware
- lexmark xc9265 firmware
- lexmark xc9335 firmware
- lexmark xc9445 firmware
- lexmark xc9455 firmware
- lexmark xc9465 firmware
- lexmark xm1242 firmware
- lexmark xm1246 firmware
- lexmark xm1342 firmware
- lexmark xm3142 firmware
- lexmark xm3250 firmware
- lexmark xm5365 firmware
- lexmark xm7355 firmware
- lexmark xm7370 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-23560 is a critical vulnerability (CVSS 9.8) in Lexmark B2236 Firmware, published January 23, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.9%, the 96th percentile. No source names a fixed version.