Lexmark

VDP · Imaging and Printers · Self-Hosted

Industry: Imaging and Printers
Type: Vulnerability Disclosure Program
Platform: Self-Hosted
VDP: www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html ↗
Payouts: No bounty (VDP)
Scope: Lexmark products — laser printers and multifunction devices, and their embedded firmware and web management interfaces.

In-scope assets (1)


Printers and Multifunction Devices	VDP

Previous Research

Publications and Presentations

Presentations

SysPWN — VR for Pwn2Own — NCC Group, August 10, 2023
Remotely Exploiting 3 Embedded Devices (Pwn2Own 2021) — NCC Group, 2021
Exploiting the Lexmark PostScript Stack — August 24, 2023
New Isn't Always Novel: Grep Your Way to $20K at Pwn2Own — DEF CON 31 War Stories, August 2023

Publications

Lexmark Command Injection Vulnerability ZDI-CAN-19470 (Pwn2Own Toronto 2022) — Horizon3.ai, August 10, 2023
For the Common Good: How to Compromise a Printer in Three Simple Steps — CrowdStrike, June 7, 2022
Bypassing Firmware Encryption on Lexmark Printer (Part 1) — NCC Group, February 17, 2022
Analyzing a PJL Directory Traversal Vulnerability — Exploiting the Lexmark MC3224i Printer (Part 2) — NCC Group, February 18, 2022

<- back to Programs