{"id":"CVE-2021-44735","aliases":["EUVD-2021-31550","GHSA-m2cw-h5p2-hjpq"],"status":"published","title":"Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.","description":"Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.07025,"percentile":0.94223,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-77"],"published":"2022-01-20T16:07:16Z","modified":"2026-06-17T04:12:47Z","products":[{"vendor":"lexmark","product":"b2236_firmware"},{"vendor":"lexmark","product":"b2338_firmware"},{"vendor":"lexmark","product":"b2442_firmware"},{"vendor":"lexmark","product":"b2546_firmware"},{"vendor":"lexmark","product":"b2650_firmware"},{"vendor":"lexmark","product":"b2865_firmware"},{"vendor":"lexmark","product":"b3340_firmware"},{"vendor":"lexmark","product":"b3442_firmware"},{"vendor":"lexmark","product":"c2240_firmware"},{"vendor":"lexmark","product":"c2325_firmware"},{"vendor":"lexmark","product":"c2326_firmware"},{"vendor":"lexmark","product":"c2425_firmware"},{"vendor":"lexmark","product":"c2535_firmware"},{"vendor":"lexmark","product":"c3224_firmware"},{"vendor":"lexmark","product":"c3326_firmware"},{"vendor":"lexmark","product":"c3426_firmware"},{"vendor":"lexmark","product":"c4150_firmware"},{"vendor":"lexmark","product":"c6160_firmware"},{"vendor":"lexmark","product":"c9235_firmware"},{"vendor":"lexmark","product":"cs331_firmware"},{"vendor":"lexmark","product":"cs421_firmware"},{"vendor":"lexmark","product":"cs431_firmware"},{"vendor":"lexmark","product":"cs439_firmware"},{"vendor":"lexmark","product":"cs521_firmware"},{"vendor":"lexmark","product":"cs622_firmware"},{"vendor":"lexmark","product":"cs720_firmware"},{"vendor":"lexmark","product":"cs725_firmware"},{"vendor":"lexmark","product":"cs727_firmware"},{"vendor":"lexmark","product":"cs728_firmware"},{"vendor":"lexmark","product":"cs820_firmware"},{"vendor":"lexmark","product":"cs827_firmware"},{"vendor":"lexmark","product":"cs921_firmware"},{"vendor":"lexmark","product":"cs923_firmware"},{"vendor":"lexmark","product":"cs927_firmware"},{"vendor":"lexmark","product":"cx331_firmware"},{"vendor":"lexmark","product":"cx421_firmware"},{"vendor":"lexmark","product":"cx431_firmware"},{"vendor":"lexmark","product":"cx522_firmware"},{"vendor":"lexmark","product":"cx622_firmware"},{"vendor":"lexmark","product":"cx625_firmware"},{"vendor":"lexmark","product":"cx725_firmware"},{"vendor":"lexmark","product":"cx727_firmware"},{"vendor":"lexmark","product":"cx820_firmware"},{"vendor":"lexmark","product":"cx825_firmware"},{"vendor":"lexmark","product":"cx860_firmware"},{"vendor":"lexmark","product":"cx920_firmware"},{"vendor":"lexmark","product":"cx921_firmware"},{"vendor":"lexmark","product":"cx922_firmware"},{"vendor":"lexmark","product":"cx923_firmware"},{"vendor":"lexmark","product":"cx924_firmware"},{"vendor":"lexmark","product":"m1242_firmware"},{"vendor":"lexmark","product":"m1246_firmware"},{"vendor":"lexmark","product":"m1342_firmware"},{"vendor":"lexmark","product":"m3250_firmware"},{"vendor":"lexmark","product":"m5255_firmware"},{"vendor":"lexmark","product":"m5270_firmware"},{"vendor":"lexmark","product":"mb2236_firmware"},{"vendor":"lexmark","product":"mb2338_firmware"},{"vendor":"lexmark","product":"mb2442_firmware"},{"vendor":"lexmark","product":"mb2546_firmware"},{"vendor":"lexmark","product":"mb2650_firmware"},{"vendor":"lexmark","product":"mb2770_firmware"},{"vendor":"lexmark","product":"mb3442_firmware"},{"vendor":"lexmark","product":"mc2325_firmware"},{"vendor":"lexmark","product":"mc2425_firmware"},{"vendor":"lexmark","product":"mc2535_firmware"},{"vendor":"lexmark","product":"mc2640_firmware"},{"vendor":"lexmark","product":"mc3224_firmware"},{"vendor":"lexmark","product":"mc3326_firmware"},{"vendor":"lexmark","product":"mc3426_firmware"},{"vendor":"lexmark","product":"ms321_firmware"},{"vendor":"lexmark","product":"ms331_firmware"},{"vendor":"lexmark","product":"ms421_firmware"},{"vendor":"lexmark","product":"ms431_firmware"},{"vendor":"lexmark","product":"ms521_firmware"},{"vendor":"lexmark","product":"ms621_firmware"},{"vendor":"lexmark","product":"ms622_firmware"},{"vendor":"lexmark","product":"ms725_firmware"},{"vendor":"lexmark","product":"ms821_firmware"},{"vendor":"lexmark","product":"ms822_firmware"},{"vendor":"lexmark","product":"ms823_firmware"},{"vendor":"lexmark","product":"ms825_firmware"},{"vendor":"lexmark","product":"ms826_firmware"},{"vendor":"lexmark","product":"mx321_firmware"},{"vendor":"lexmark","product":"mx331_firmware"},{"vendor":"lexmark","product":"mx421_firmware"},{"vendor":"lexmark","product":"mx431_firmware"},{"vendor":"lexmark","product":"mx521_firmware"},{"vendor":"lexmark","product":"mx522_firmware"},{"vendor":"lexmark","product":"mx622_firmware"},{"vendor":"lexmark","product":"mx721_firmware"},{"vendor":"lexmark","product":"mx722_firmware"},{"vendor":"lexmark","product":"mx822_firmware"},{"vendor":"lexmark","product":"mx826_firmware"},{"vendor":"lexmark","product":"xc2235_firmware"},{"vendor":"lexmark","product":"xc2326_firmware"},{"vendor":"lexmark","product":"xc4140_firmware"},{"vendor":"lexmark","product":"xc4143_firmware"},{"vendor":"lexmark","product":"xc4150_firmware"},{"vendor":"lexmark","product":"xc4153_firmware"},{"vendor":"lexmark","product":"xc4240_firmware"},{"vendor":"lexmark","product":"xc6152_firmware"},{"vendor":"lexmark","product":"xc6153_firmware"},{"vendor":"lexmark","product":"xc8155_firmware"},{"vendor":"lexmark","product":"xc8160_firmware"},{"vendor":"lexmark","product":"xc8163_firmware"},{"vendor":"lexmark","product":"xc9225_firmware"},{"vendor":"lexmark","product":"xc9235_firmware"},{"vendor":"lexmark","product":"xc9245_firmware"},{"vendor":"lexmark","product":"xc9255_firmware"},{"vendor":"lexmark","product":"xc9265_firmware"},{"vendor":"lexmark","product":"xm1242_firmware"},{"vendor":"lexmark","product":"xm1246_firmware"},{"vendor":"lexmark","product":"xm1342_firmware"},{"vendor":"lexmark","product":"xm3250_firmware"},{"vendor":"lexmark","product":"xm5365_firmware"},{"vendor":"lexmark","product":"xm7355_firmware"},{"vendor":"lexmark","product":"xm7370_firmware"}],"references":[{"url":"https://support.lexmark.com/alerts/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-330/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-326/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-329/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44735"},{"url":"https://github.com/advisories/GHSA-m2cw-h5p2-hjpq"}],"sources":{"cve":[{"id":"CVE-2021-44735","description":"Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.","status":"published","published":"2022-01-20T16:07:16Z","modified":"2024-08-04T04:32:12.23Z","updated_at":"2026-11-02T14:33:01.166399Z"}],"euvd":[{"id":"EUVD-2021-31550","description":"Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.","status":"published","published":"2022-01-20T16:07:16Z","modified":"2024-08-04T04:32:12Z","updated_at":"2026-11-03T03:08:28.560815Z"}],"ghsa":[{"id":"GHSA-m2cw-h5p2-hjpq","title":"Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.","description":"Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.","status":"published","published":"2022-01-21T00:00:45Z","modified":"2023-02-03T05:04:54Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:53:38.626767Z"}],"nvd":[{"id":"CVE-2021-44735","description":"Embedded web server command injection vulnerability in Lexmark devices through 2021-12-07.","status":"published","published":"2022-01-20T17:15:17.88Z","modified":"2026-06-17T04:12:47.317Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-77"],"updated_at":"2026-11-02T14:07:03.821385Z"}]}}