---
id: CVE-2025-65077
title: Relative path traversal vulnerability in Embedded Solutions Framework
summary: >-
  A relative path traversal vulnerability has been identified in the Embedded
  Solutions Framework in various Lexmark devices. This vulnerability can be
  leveraged by an attacker to execute arbitrary code as an unprivileged user.
severity: high
cvss: 8.8
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-22
vendor: Lexmark
product: >-
  MXTCT, MSNGM, MSTGM, MXNGM, MXTGM, CSNGV, CSTGV, CXTGV, MSNGW, MSTGW, MXTGW,
  CSTLS, CXTLS, MXTLS, CSTMM, CXTMM, CSTPC, CXTPC, MXTPM, MSNSN, MSTSN, MXTSN,
  CSNZJ, CSTZJ, CXNZJ, CXTZJ
affected:
  - >-
    mxtct_msngm_mstgm_mxngm_mxtgm_csngv_cstgv_cxtgv_msngw_mstgw_mxtgw_cstls_cxtls_mxtls_cstmm_cxtmm_cstpc_cxtpc_mxtpm_msnsn_mstsn_mxtsn_csnzj_cstzj_cxnzj_cxtzj
    < 250.210
  - >-
    cstat_cxtat_mslbd_mxlbd_cslbl_cxlbl_cslbn_cxlbn_cstmh_cxtmh_cstpp_cxtpp_mslsg_mxlsg
    < 230.507
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-02-06T04:55:27.610829Z'
published: '2026-02-03'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T22:03:07.714Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-65077'
references:
  - url: >-
      https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
tags:
  - cve.org
epss: 0.00681
epssPercentile: 0.52694
ingestedAt: '2026-11-05T20:33:06.570Z'
---

## Overview

A relative path traversal vulnerability has been identified in the Embedded Solutions Framework in various Lexmark devices. This vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

## Affected

- `mxtct_msngm_mstgm_mxngm_mxtgm_csngv_cstgv_cxtgv_msngw_mstgw_mxtgw_cstls_cxtls_mxtls_cstmm_cxtmm_cstpc_cxtpc_mxtpm_msnsn_mstsn_mxtsn_csnzj_cstzj_cxnzj_cxtzj < 250.210`
- `cstat_cxtat_mslbd_mxlbd_cslbl_cxlbl_cslbn_cxlbn_cstmh_cxtmh_cstpp_cxtpp_mslsg_mxlsg < 230.507`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Lexmark recommends a firmware update if your device has affected firmware.