CVE-2025-65078: Lexmark Embedded Solutions Framework Untrusted Search Path Vulnerability
CVE-2025-65078 is an untrusted search path weakness (CWE-426) in the Embedded Solutions Framework used by various Lexmark devices. The consulted record gives a CVSS 4.0 score of 9.3 with a network attack vector and no privileges or user interaction required. No affected or fixed versions are listed in the record, so administrators should check the vendor advisory directly.
Overview
CVE-2025-65078 is classified as CWE-426, Untrusted Search Path, and affects the Embedded Solutions Framework in various Lexmark devices. The description states that an attacker could leverage this weakness to execute arbitrary code. The primary reference to check is the Lexmark security advisories page.
Impact
- The description states that arbitrary code execution is possible.
- The CVSS 4.0 vector supplied by the CNA indicates high impact to confidentiality, integrity and availability of the vulnerable system, with a network attack vector, low complexity, and no privileges or user interaction required.
- Inference: printers and multifunction devices often sit on internal networks, so a compromise could expose documents handled by the device and affect neighbouring systems. The sources do not state this.
Affected products and versions
- The consulted record does not list affected products, model numbers or version ranges.
- The description refers only to various Lexmark devices that use the Embedded Solutions Framework.
- Unknown: which models, firmware builds and framework versions are affected. The Lexmark security advisories page is the place to confirm this.
Exploitation status
- This CVE is not listed in the CISA KEV catalog in the record consulted.
- No confirmed exploitation appears in the sources consulted at the time of this analysis.
- No EPSS data is available in the record.
Remediation and mitigation
- Check the Lexmark security advisories page for the current advisory, affected models and any firmware updates.
- Build an inventory of Lexmark devices, including model and firmware level, to prioritise verification.
- Until a fix is confirmed for your models, reduce exposure: restrict network access to device management interfaces, place devices in segmented networks, and limit access to trusted hosts.
- Apply vendor firmware updates when they are published, and validate them through change control.
Detection guidance
- Monitor device firmware and configuration changes through management consoles or asset management tools.
- Review network logs for unexpected connections to and from printers and multifunction devices.
- Watch for unexpected services or behaviour on devices after updates or maintenance.
Limitations of the available information
- The record has no affected version list, no fixed version list and no vendor-specific technical details.
- The source record had no title, so the title here is derived from the product name and weakness class.
- The consulted sources do not describe the technical mechanics of the weakness, and this analysis does not speculate about them.
Frequently asked questions
What is CVE-2025-65078?
It is an untrusted search path weakness (CWE-426) in the Embedded Solutions Framework used by various Lexmark devices. The description states that it can be leveraged to execute arbitrary code.
Is this CVE known to be exploited?
It is not listed in the CISA KEV catalog in the record consulted, and no confirmed exploitation appears in the sources consulted at the time of this analysis.
Which Lexmark versions are affected?
The consulted record does not list affected models or versions. Check the Lexmark security advisories page to confirm which devices and firmware levels are impacted.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.