CVE-2016-1896
Summary
| CVE | CVE-2016-1896 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-01-27 05:59:00 UTC |
| Updated | 2016-02-01 01:16:00 UTC |
| Description | Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status. |
Risk And Classification
Problem Types: CWE-264 | CWE-254
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Lexmark | C4150 | All | All | All | All |
| Hardware | Lexmark | C4150 | All | All | All | All |
| Hardware | Lexmark | C6160 | All | All | All | All |
| Hardware | Lexmark | C6160 | All | All | All | All |
| Hardware | Lexmark | Cs720de | All | All | All | All |
| Hardware | Lexmark | Cs720de | All | All | All | All |
| Hardware | Lexmark | Cs720dte | All | All | All | All |
| Hardware | Lexmark | Cs720dte | All | All | All | All |
| Hardware | Lexmark | Cs725de | All | All | All | All |
| Hardware | Lexmark | Cs725de | All | All | All | All |
| Hardware | Lexmark | Cs725dte | All | All | All | All |
| Hardware | Lexmark | Cs725dte | All | All | All | All |
| Hardware | Lexmark | Cs820de | All | All | All | All |
| Hardware | Lexmark | Cs820de | All | All | All | All |
| Hardware | Lexmark | Cs820dte | All | All | All | All |
| Hardware | Lexmark | Cs820dte | All | All | All | All |
| Hardware | Lexmark | Cs820dtfe | All | All | All | All |
| Hardware | Lexmark | Cs820dtfe | All | All | All | All |
| Hardware | Lexmark | Cx725de | All | All | All | All |
| Hardware | Lexmark | Cx725de | All | All | All | All |
| Hardware | Lexmark | Cx725dhe | All | All | All | All |
| Hardware | Lexmark | Cx725dhe | All | All | All | All |
| Hardware | Lexmark | Cx725dthe | All | All | All | All |
| Hardware | Lexmark | Cx725dthe | All | All | All | All |
| Hardware | Lexmark | Cx820de | All | All | All | All |
| Hardware | Lexmark | Cx820de | All | All | All | All |
| Hardware | Lexmark | Cx820dtfe | All | All | All | All |
| Hardware | Lexmark | Cx820dtfe | All | All | All | All |
| Hardware | Lexmark | Cx825de | All | All | All | All |
| Hardware | Lexmark | Cx825de | All | All | All | All |
| Hardware | Lexmark | Cx825dte | All | All | All | All |
| Hardware | Lexmark | Cx825dte | All | All | All | All |
| Hardware | Lexmark | Cx825dtfe | All | All | All | All |
| Hardware | Lexmark | Cx825dtfe | All | All | All | All |
| Hardware | Lexmark | Cx860de | All | All | All | All |
| Hardware | Lexmark | Cx860de | All | All | All | All |
| Hardware | Lexmark | Cx860dte | All | All | All | All |
| Hardware | Lexmark | Cx860dte | All | All | All | All |
| Hardware | Lexmark | Cx860dtfe | All | All | All | All |
| Hardware | Lexmark | Cx860dtfe | All | All | All | All |
| Operating System | Lexmark | Printer Firmware | All | All | All | All |
| Operating System | Lexmark | Printer Firmware | All | All | All | All |
| Operating System | Lexmark | Printer Firmware | All | All | All | All |
| Operating System | Lexmark | Printer Firmware | All | All | All | All |
| Hardware | Lexmark | Xc4150 | All | All | All | All |
| Hardware | Lexmark | Xc4150 | All | All | All | All |
| Hardware | Lexmark | Xc6152de | All | All | All | All |
| Hardware | Lexmark | Xc6152de | All | All | All | All |
| Hardware | Lexmark | Xc6152dtfe | All | All | All | All |
| Hardware | Lexmark | Xc6152dtfe | All | All | All | All |
| Hardware | Lexmark | Xc8155de | All | All | All | All |
| Hardware | Lexmark | Xc8155de | All | All | All | All |
| Hardware | Lexmark | Xc8155dte | All | All | All | All |
| Hardware | Lexmark | Xc8155dte | All | All | All | All |
| Hardware | Lexmark | Xc8160de | All | All | All | All |
| Hardware | Lexmark | Xc8160de | All | All | All | All |
| Hardware | Lexmark | Xc8160dte | All | All | All | All |
| Hardware | Lexmark | Xc8160dte | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Lexmark Security Advisory: Race Condition During Initialization (CVE-2016-1896) | CONFIRM | support.lexmark.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.