{"id":"CVE-2023-50737","aliases":["EUVD-2023-55493","GHSA-jg84-v5xw-8m52"],"status":"published","title":"An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.","description":"The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.00968,"percentile":0.6204,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2024-02-28T02:38:03Z","modified":"2026-06-17T06:39:54Z","products":[{"vendor":"lexmark","product":"6500e"},{"vendor":"lexmark","product":"c746"},{"vendor":"lexmark","product":"c748"},{"vendor":"lexmark","product":"c792"},{"vendor":"lexmark","product":"c925"},{"vendor":"lexmark","product":"c950"},{"vendor":"lexmark","product":"cs310"},{"vendor":"lexmark","product":"cs410"},{"vendor":"lexmark","product":"cs510"},{"vendor":"lexmark","product":"cslbl_firmware"},{"vendor":"lexmark","product":"cslbn_firmware"},{"vendor":"lexmark","product":"csngv_firmware"},{"vendor":"lexmark","product":"csnzj_firmware"},{"vendor":"lexmark","product":"cstat_firmware"},{"vendor":"lexmark","product":"cstgv_firmware"},{"vendor":"lexmark","product":"cstmh_firmware"},{"vendor":"lexmark","product":"cstpc_firmware"},{"vendor":"lexmark","product":"cstpp_firmware"},{"vendor":"lexmark","product":"cstzj_firmware"},{"vendor":"lexmark","product":"cx310"},{"vendor":"lexmark","product":"cx410"},{"vendor":"lexmark","product":"cx510"},{"vendor":"lexmark","product":"cxlbl_firmware"},{"vendor":"lexmark","product":"cxlbn_firmware"},{"vendor":"lexmark","product":"cxnzj_firmware"},{"vendor":"lexmark","product":"cxtat_firmware"},{"vendor":"lexmark","product":"cxtgv_firmware"},{"vendor":"lexmark","product":"cxtmh_firmware"},{"vendor":"lexmark","product":"cxtmm_firmware"},{"vendor":"lexmark","product":"cxtpc_firmware"},{"vendor":"lexmark","product":"cxtpp_firmware"},{"vendor":"lexmark","product":"cxtzj_firmware"},{"vendor":"lexmark","product":"ms310"},{"vendor":"lexmark","product":"ms315"},{"vendor":"lexmark","product":"ms610de"},{"vendor":"lexmark","product":"ms610dn"},{"vendor":"lexmark","product":"ms711"},{"vendor":"lexmark","product":"ms810de"},{"vendor":"lexmark","product":"ms812de"},{"vendor":"lexmark","product":"ms911"},{"vendor":"lexmark","product":"mslbd_firmware"},{"vendor":"lexmark","product":"mslsg_firmware"},{"vendor":"lexmark","product":"msngm_firmware"},{"vendor":"lexmark","product":"msngw_firmware"},{"vendor":"lexmark","product":"msnsn_firmware"},{"vendor":"lexmark","product":"mstgm_firmware"},{"vendor":"lexmark","product":"mstgw_firmware"},{"vendor":"lexmark","product":"mstsn_firmware"},{"vendor":"lexmark","product":"mx310"},{"vendor":"lexmark","product":"mx410"},{"vendor":"lexmark","product":"mx610"},{"vendor":"lexmark","product":"mx6500e"},{"vendor":"lexmark","product":"mx710"},{"vendor":"lexmark","product":"mx910"},{"vendor":"lexmark","product":"mxlbd_firmware"},{"vendor":"lexmark","product":"mxlsg_firmware"},{"vendor":"lexmark","product":"mxngm_firmware"},{"vendor":"lexmark","product":"mxtct_firmware"},{"vendor":"lexmark","product":"mxtgm_firmware"},{"vendor":"lexmark","product":"mxtgw_firmware"},{"vendor":"lexmark","product":"mxtpm_firmware"},{"vendor":"lexmark","product":"mxtsn_firmware"},{"vendor":"lexmark","product":"various"},{"vendor":"lexmark","product":"x548"},{"vendor":"lexmark","product":"x746"},{"vendor":"lexmark","product":"x792"},{"vendor":"lexmark","product":"x925"},{"vendor":"lexmark","product":"x950"}],"references":[{"url":"https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html","tags":["vendor-advisory","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50737"},{"url":"https://github.com/advisories/GHSA-jg84-v5xw-8m52"}],"sources":{"cve":[{"id":"CVE-2023-50737","title":"An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.","description":"The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.\n","status":"published","published":"2024-02-28T02:38:03.334Z","modified":"2024-08-23T14:56:24.259Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:34.923818Z"}],"euvd":[{"id":"EUVD-2023-55493","description":"The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.\n","status":"published","published":"2024-02-28T02:38:03Z","modified":"2024-08-23T14:56:24Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:56:12.238043Z"}],"ghsa":[{"id":"GHSA-jg84-v5xw-8m52","title":"The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in...","description":"The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.\n","status":"published","published":"2024-02-28T03:30:30Z","modified":"2026-03-17T05:03:05Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:06:39.944141Z"}],"nvd":[{"id":"CVE-2023-50737","description":"The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.\n","status":"published","published":"2024-02-28T03:15:07.9Z","modified":"2026-06-17T06:39:54.233Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:09:07.077422Z"}]}}