CVE-2025-65078 — Untrusted search path vulnerability in Embedded Solutions Framework

CVE-2025-65078

Untrusted search path vulnerability in Embedded Solutions Framework PUBLISHED

Description (CNA)

An untrusted search path vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code.

Affected (CNA)

Vendor / product	Versions
Lexmark / MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW, CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN, CSNZJ, CSTZJ, CXNZJ, CXTZJ	affected 0 before 250.210
Lexmark / CSTAT, CXTAT, MSLBD, MXLBD, CSLBL, CXLBL, CSLBN, CXLBN, CSTMH, CXTMH, CSTPP, CXTPP, MSLSG, MXLSG	affected 0 before 230.507

CWE

CWE-426

References

https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.