Lexmark MX6500 Incorrect Access Control Vulnerability

A vulnerability exists in Lexmark MX6500 devices with firmware LW75.JD.P296 and earlier, allowing for incorrect access control management. This issue arises from a race condition that misreads the state of security jumpers during the boot process, leading to a reset of access controls to default values. The vulnerability can be exploited when the device is powered on or rebooted, causing the access control settings to revert, potentially allowing unauthorized access or actions.

Impact

Exploitation of this vulnerability can reset security access controls to their default values, potentially allowing unauthorized access or actions that should be restricted.

Remediation

Users can upgrade to Lexmark MX6500 firmware version LW75.JD.P297 or later to address this vulnerability. For assistance, contact Lexmark's Technical Support Center.