CVE-2025-65077 — Relative path traversal vulnerability in Embedded Solutions Framework

CVE-2025-65077

Relative path traversal vulnerability in Embedded Solutions Framework PUBLISHED

Description (CNA)

A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

Affected (CNA)

Vendor / product	Versions
Lexmark / MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ	affected 0 before 250.210
Lexmark / CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG	affected 0 before 230.507

CWE

CWE-22

References

https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.