VULNERABILITY INTELLIGENCE

CVE-2016-3145

CVSS score4.6 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2016-04-22
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on non-volatile memory.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references