CVE-2021-35449

EPSS 1.4%

Vexday Risk Score

18Bajo

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 1.4%KEV nãoPoC —Nuclei —Metasploit simPatch —

Ciclo de vida

15 jul 2021Exploit Metasploit disponible

19 jul 2021Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing during the add printer process, resulting in escalation of privileges to SYSTEM.

Productos afectados

n/a · n/a

Referencias

http://packetstormsecurity.com/files/163811/Lexmark-Driver-Privilege-Escalation.html https://raw.githubusercontent.com/jacob-baines/vuln_disclosure/main/vuln_2021_02.txt http://support.lexmark.com/alerts/