CVE-2025-9269— Server-Side Request Forgery (SSRF) vulnerability found in embedded web server
Quick assessment
Affected
Lexmark CX, XC, CS, MS, MX, XM, et. al.
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Lexmark是美国利盟（Lexmark）公司的一系列打印机。 Lexmark存在安全漏洞，该漏洞源于嵌入式Web服务器容易受到服务端请求伪造攻击，可能导致内部网络访问。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-9269
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Server-Side Request Forgery (SSRF) vulnerability found in embedded web server
Source: CVE Program / CVE List V5
Vulnerability Description
A Server-Side Request Forgery (SSRF) vulnerability has been identified in the embedded web server in various Lexmark devices. This vulnerability can be leveraged by an attacker to force the device to send an arbitrary HTTP request to a third-party server. Successful exploitation of this vulnerability can lead to internal network access / potential data disclosure from a device.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Vulnerability Title
Lexmark 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Lexmark是美国利盟（Lexmark）公司的一系列打印机。 Lexmark存在安全漏洞，该漏洞源于嵌入式Web服务器容易受到服务端请求伪造攻击，可能导致内部网络访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Lexmark | CX, XC, CS, MS, MX, XM, et. al. | 0 ~ CXTLS.250.199 | - |
|
II. Public POCs for CVE-2025-9269
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-9269
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-9269 (1)
IV. Related Vulnerabilities
Same product: CX, XC, CS, MS, MX, XM, et. al.
-
CVE-2024-11346
Access of Resource Using Incompatible Type in Postscript int -
CVE-2024-11344
Type confusion vulnerability in the Postscript interpreter i -
CVE-2025-1127
Combination Path Traversal and Concurrent Execution vulnerab -
CVE-2024-11345
Heap-based memory vulnerability in the Postscript interprete
Same vendor: Lexmark
-
CVE-2025-65078
Untrusted search path vulnerability in Embedded Solutions Fr -
CVE-2025-65077
Relative path traversal vulnerability in Embedded Solutions -
CVE-2025-65081
Out-of-bounds read vulnerability in Postscript interpreter -
CVE-2025-65080
Type confusion vulnerability in Postscript interpreter -
CVE-2025-65079
Heap-based buffer overflow vulnerability in Postscript inter
Same weakness: CWE-918
-
CVE-2026-101022
Grid Protection Alliance openPDC and openHistorian Server-Si -
CVE-2026-78027
Dell Secure Connect Gateway < 5.34 SSRF漏洞 -
CVE-2026-78024
Dell SCG<5.34.00.16 SSRF漏洞致信息泄露 -
CVE-2026-69435
Azure SRE Agent Elevation of Privilege Vulnerability -
CVE-2026-107781
Dromara Skyeye Unauthenticated SSRF and File Overwrite via e
V. Comments for CVE-2025-9269
No comments yet