Dashboard / CVE-2025-65077

CVE-2025-65077

HIGH
MEDIUM Priority: 0.06 BB Relevance: 78/100
Published: 2026-02-03 Modified: 2026-11-03 First seen: 2026-11-03 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
AT: None
VC: Low
VI: High
VA: Low

Description

A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
Lexmark CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG 0 < 230.507
Lexmark MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ 0 < 250.210

References & Advisories (1)

Bug Bounty Relevance

78 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

8.8 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

EPSS — Exploitation Probability

0.68%
Raw Score 0.006810
Percentile 53.0%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00681
2026-11-13
0.00681
2026-11-12
0.00681
2026-11-10
0.00681
2026-11-09
0.00681
2026-11-08
0.00681
2026-11-07
0.00681
2026-11-06
0.00681
2026-11-05
0.00681
2026-11-04
0.00681
2026-11-03
0.00681

Intelligence Sources

mitre ref →

External Links