so.cl

Rascals are always sociable, and the chief sign that a man has any nobility in his character is the little pleasure he takes in others company. Arthur Schopenhauer


Lexmark MC3224adwe RCE exploit

This document details a vulnerability in the Lexmark MC3224adwe printer. This vulnerability was uncovered using static code analysis and verified to be working on the latest available firmware for this device (version CXLBL.081.225 at the time of writing).

The full exploit chains a couple of seemingly harmless/isolated functionalities to eventually fully compromise the device. Lexmark MC3224adwe RCE exploit

January 10, 2023
#vulnerability ▪ #printer ▪ #hardware