{"id":"CVE-2016-1896","aliases":["EUVD-2016-2990","GHSA-p46f-5x6r-rjgf"],"status":"published","title":"Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02...","description":"Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03259,"percentile":0.88449,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-254","CWE-264"],"published":"2016-01-27T02:00:00Z","modified":"2026-06-17T00:42:48Z","products":[{"vendor":"lexmark","product":"printer_firmware"}],"references":[{"url":"http://support.lexmark.com/index?page=content\u0026id=TE745","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1896"},{"url":"https://github.com/advisories/GHSA-p46f-5x6r-rjgf"}],"sources":{"cve":[{"id":"CVE-2016-1896","description":"Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.","status":"published","published":"2016-01-27T02:00:00Z","modified":"2024-08-05T23:10:39.948Z","updated_at":"2026-11-02T14:33:36.175943Z"}],"euvd":[{"id":"EUVD-2016-2990","description":"Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.","status":"published","published":"2016-01-27T02:00:00Z","modified":"2024-08-05T23:10:39Z","updated_at":"2026-11-03T02:22:55.519158Z"}],"ghsa":[{"id":"GHSA-p46f-5x6r-rjgf","title":"Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02...","description":"Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.","status":"published","published":"2022-05-17T03:59:10Z","modified":"2023-01-28T05:00:53Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:43:26.472457Z"}],"nvd":[{"id":"CVE-2016-1896","description":"Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.","status":"published","published":"2016-01-27T05:59:04.307Z","modified":"2026-06-17T00:42:48.84Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-254","CWE-264"],"updated_at":"2026-11-02T14:03:21.143462Z"}]}}