CVE-2023-50737
An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.
CVE-2023-50737 is a critical vulnerability (CVSS 9.1) in Lexmark 6500e, published February 28, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.97%, the 61st percentile. No source names a fixed version.
The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.
The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.
- Record
CVE-2023-50737- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2023-55493
The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.
- Record
EUVD-2023-55493- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jg84-v5xw-8m52
The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in...
The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.
- Record
GHSA-jg84-v5xw-8m52- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.
- Record
CVE-2023-50737- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
- lexmark 6500e
- lexmark c746
- lexmark c748
- lexmark c792
- lexmark c925
- lexmark c950
- lexmark cs310
- lexmark cs410
- lexmark cs510
- lexmark cslbl firmware
- lexmark cslbn firmware
- lexmark csngv firmware
Show 56 moreShow less
- lexmark csnzj firmware
- lexmark cstat firmware
- lexmark cstgv firmware
- lexmark cstmh firmware
- lexmark cstpc firmware
- lexmark cstpp firmware
- lexmark cstzj firmware
- lexmark cx310
- lexmark cx410
- lexmark cx510
- lexmark cxlbl firmware
- lexmark cxlbn firmware
- lexmark cxnzj firmware
- lexmark cxtat firmware
- lexmark cxtgv firmware
- lexmark cxtmh firmware
- lexmark cxtmm firmware
- lexmark cxtpc firmware
- lexmark cxtpp firmware
- lexmark cxtzj firmware
- lexmark ms310
- lexmark ms315
- lexmark ms610de
- lexmark ms610dn
- lexmark ms711
- lexmark ms810de
- lexmark ms812de
- lexmark ms911
- lexmark mslbd firmware
- lexmark mslsg firmware
- lexmark msngm firmware
- lexmark msngw firmware
- lexmark msnsn firmware
- lexmark mstgm firmware
- lexmark mstgw firmware
- lexmark mstsn firmware
- lexmark mx310
- lexmark mx410
- lexmark mx610
- lexmark mx6500e
- lexmark mx710
- lexmark mx910
- lexmark mxlbd firmware
- lexmark mxlsg firmware
- lexmark mxngm firmware
- lexmark mxtct firmware
- lexmark mxtgm firmware
- lexmark mxtgw firmware
- lexmark mxtpm firmware
- lexmark mxtsn firmware
- lexmark various
- lexmark x548
- lexmark x746
- lexmark x792
- lexmark x925
- lexmark x950
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases, published | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |