Back to Database
Status published
Medium
CVE-2016-3145
Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063,...
Vulnerability Description
Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on non-volatile memory.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-3145
Credits & Attribution
No credits recorded in the NVD database.
More from lexmark
View All →CVE-2022-29850
Various Lexmark products through 2022-04-27 allow an attacker who has...
High
8.1
CVE-2022-24935
Lexmark products through 2022-02-10 have Incorrect Access Control....
High
7.5
CVE-2021-44738
Buffer overflow vulnerability has been identified in Lexmark devices through...
Critical
9.8
CVE-2021-44737
PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that...
High
8.8
CVE-2021-44736
The initial admin account setup wizard on Lexmark devices allow...
Critical
9.8
Affected Vendor
lexmark
View all reports →Affected Software
printer firmware
Vulnerable Versions:
pp, cb, yk, atl
Timeline
Official Publish:
April 22nd, 2016
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.