CVE-2025-4046— Missing Authorization in Lexmark Cloud Services badge management
Quick assessment
Affected
Lexmark Lexmark Cloud Services
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Lexmark Cloud Services是美国利盟（Lexmark）公司的一款基于云端的服务套件。 Lexmark Cloud Services存在安全漏洞，该漏洞源于徽章管理缺少授权，可能允许攻击者重新分配组织内徽章。
Possible ATT&CK Techniques 1 AI
T1078.001 · Default Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-4046
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Missing Authorization in Lexmark Cloud Services badge management
Source: CVE Program / CVE List V5
Vulnerability Description
A missing authorization vulnerability in Lexmark Cloud Services badge management allows attacker to reassign badges within their organization
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
Lexmark Cloud Services 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Lexmark Cloud Services是美国利盟（Lexmark）公司的一款基于云端的服务套件。 Lexmark Cloud Services存在安全漏洞，该漏洞源于徽章管理缺少授权，可能允许攻击者重新分配组织内徽章。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Lexmark | Lexmark Cloud Services | 0 | - |
|
II. Public POCs for CVE-2025-4046
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-4046
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-4046 (1)
IV. Related Vulnerabilities
Same vendor: Lexmark
-
CVE-2025-65078
Untrusted search path vulnerability in Embedded Solutions Fr -
CVE-2025-65077
Relative path traversal vulnerability in Embedded Solutions -
CVE-2025-65081
Out-of-bounds read vulnerability in Postscript interpreter -
CVE-2025-65080
Type confusion vulnerability in Postscript interpreter -
CVE-2025-65079
Heap-based buffer overflow vulnerability in Postscript inter
Same weakness: CWE-862
-
CVE-2026-78380
Private Group and Market Posts Disclosed Through Public Noti -
CVE-2026-76847
act 0.2.81 through 0.2.89 Missing Authorization in the Artif -
CVE-2026-78372
RansomLook Missing Authorization Allows Disclosure of Privat -
CVE-2026-78370
RansomLook Unauthenticated Database Export Exposes Private D -
CVE-2026-28190
WordPress ProLancer Element plugin <= 1.4.8 - Broken Access
V. Comments for CVE-2025-4046
No comments yet