CVE-2023-22960
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency.
7.5 HighPublic exploit
CVE-2023-22960 is a high vulnerability (CVSS 7.5) in Lexmark B2236 Firmware, published January 23, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 28.0%, the 98th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 3.1, NVD
- Exploit chance
- 28.0%EPSS, 98th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
28.0%Up 27.1 points since Jan 24, 2023
Affected products
- lexmark b2236 firmware
- lexmark b2338 firmware
- lexmark b2442 firmware
- lexmark b2546 firmware
- lexmark b2650 firmware
- lexmark b2865 firmware
- lexmark b3340 firmware
- lexmark b3442 firmware
- lexmark c2240 firmware
- lexmark c2325 firmware
- lexmark c2326 firmware
- lexmark c2425 firmware
Show 116 moreShow less
- lexmark c2535 firmware
- lexmark c3224 firmware
- lexmark c3326 firmware
- lexmark c3426 firmware
- lexmark c4150 firmware
- lexmark c6160 firmware
- lexmark c9235 firmware
- lexmark cs331 firmware
- lexmark cs421 firmware
- lexmark cs431 firmware
- lexmark cs439 firmware
- lexmark cs521 firmware
- lexmark cs622 firmware
- lexmark cs720 firmware
- lexmark cs725 firmware
- lexmark cs727 firmware
- lexmark cs728 firmware
- lexmark cs820 firmware
- lexmark cs827 firmware
- lexmark cs921 firmware
- lexmark cs923 firmware
- lexmark cs927 firmware
- lexmark cx331 firmware
- lexmark cx421 firmware
- lexmark cx431 firmware
- lexmark cx522 firmware
- lexmark cx622 firmware
- lexmark cx625 firmware
- lexmark cx725 firmware
- lexmark cx727 firmware
- lexmark cx820 firmware
- lexmark cx825 firmware
- lexmark cx860 firmware
- lexmark cx920 firmware
- lexmark cx921 firmware
- lexmark cx922 firmware
- lexmark cx923 firmware
- lexmark cx924 firmware
- lexmark cx944 firmware
- lexmark m1242 firmware
- lexmark m1246 firmware
- lexmark m1342 firmware
- lexmark m3250 firmware
- lexmark m5255 firmware
- lexmark m5270 firmware
- lexmark mb2236 firmware
- lexmark mb2338 firmware
- lexmark mb2442 firmware
- lexmark mb2546 firmware
- lexmark mb2650 firmware
- lexmark mb2770 firmware
- lexmark mb3442 firmware
- lexmark mc2325 firmware
- lexmark mc2425 firmware
- lexmark mc2535 firmware
- lexmark mc2640 firmware
- lexmark mc3224 firmware
- lexmark mc3326 firmware
- lexmark mc3426 firmware
- lexmark ms321 firmware
- lexmark ms331 firmware
- lexmark ms421 firmware
- lexmark ms431 firmware
- lexmark ms521 firmware
- lexmark ms621 firmware
- lexmark ms622 firmware
- lexmark ms725 firmware
- lexmark ms821 firmware
- lexmark ms822 firmware
- lexmark ms823 firmware
- lexmark ms825 firmware
- lexmark ms826 firmware
- lexmark mx321 firmware
- lexmark mx331 firmware
- lexmark mx421 firmware
- lexmark mx431 firmware
- lexmark mx432 firmware
- lexmark mx521 firmware
- lexmark mx522 firmware
- lexmark mx622 firmware
- lexmark mx721 firmware
- lexmark mx722 firmware
- lexmark mx822 firmware
- lexmark mx826 firmware
- lexmark mx931 firmware
- lexmark xc2235 firmware
- lexmark xc2326 firmware
- lexmark xc4140 firmware
- lexmark xc4143 firmware
- lexmark xc4150 firmware
- lexmark xc4153 firmware
- lexmark xc4240 firmware
- lexmark xc4342 firmware
- lexmark xc4352 firmware
- lexmark xc6152 firmware
- lexmark xc6153 firmware
- lexmark xc8155 firmware
- lexmark xc8160 firmware
- lexmark xc8163 firmware
- lexmark xc9225 firmware
- lexmark xc9235 firmware
- lexmark xc9245 firmware
- lexmark xc9255 firmware
- lexmark xc9265 firmware
- lexmark xc9335 firmware
- lexmark xc9445 firmware
- lexmark xc9455 firmware
- lexmark xc9465 firmware
- lexmark xm1242 firmware
- lexmark xm1246 firmware
- lexmark xm1342 firmware
- lexmark xm3142 firmware
- lexmark xm3250 firmware
- lexmark xm5365 firmware
- lexmark xm7355 firmware
- lexmark xm7370 firmware
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | t3l3machus/CVE-2023-22960 | 2023-01-24 |
What each source reports
NVD Score used
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency.
- Record
CVE-2023-22960- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-307, CWE-284
- Updated
- 2026-11-02
CVE List
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency.
- Record
CVE-2023-22960- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-284
- Updated
- 2026-11-02
EUVDEUVD-2023-27061
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency.
- Record
EUVD-2023-27061- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-j9cj-vhg7-rwqr
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency.
Lexmark products through 2023-01-10 have Improper Control of Interaction Frequency.
- Record
GHSA-j9cj-vhg7-rwqr- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-284, CWE-307
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.