CVE-2025-9269
MEDIUM EPSS 22.7%
Published Sep 9, 20259mo ago · Modified Jun 17, 20261w ago
6.9 CVSS 4.0
Published Sep 9, 2025 9mo ago
Last Modified Jun 17, 2026 1w ago
Description
A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X
Threat Intelligence
EPSS Exploit Probability
22.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-918 Server-Side Request Forgery (SSRF) Validation
References 1
- lexmark.com https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.