CVE-2021-35449

EPSS 1.4%

Vexday Risk Score

18Baixo

Decisão SSVC (CISA)

Attend

PoC disponível → acompanhar de perto

Maturidade do exploit

Exploit funcional

Exploit automatizável disponível (Nuclei/Metasploit).

CVSS —EPSS 1.4%KEV nãoPoC —Nuclei —Metasploit simPatch —

Ciclo de vida

15 jul 2021Exploit Metasploit disponível

19 jul 2021Publicada no NVD

Recomendação: Planejar correção próxima — já existe PoC pública.

The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing during the add printer process, resulting in escalation of privileges to SYSTEM.

Produtos afetados

n/a · n/a

Referências

http://packetstormsecurity.com/files/163811/Lexmark-Driver-Privilege-Escalation.html https://raw.githubusercontent.com/jacob-baines/vuln_disclosure/main/vuln_2021_02.txt http://support.lexmark.com/alerts/