CVE-2016-1896

Critical

Published: 27/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.

Risk Assessment

Organizations using affected printer models may be exposed to unauthorized access to systems, potentially leading to data breaches or other serious security incidents.

Recommendation

It is recommended to update the printer firmware to the latest version to mitigate this vulnerability and implement additional security measures.

Original NVD description (English source)

Race condition in the initialization process on Lexmark printers with firmware ATL before ATL.02.049, CB before CB.02.049, PP before PP.02.049, and YK before YK.02.049 allows remote attackers to bypass authentication by leveraging incorrect detection of the security-jumper status.