Good news for owners of Lexmark printers. The manufacturer has finally provided the firmware updates for various models. On the one hand, these are supposed to eliminate a vulnerability in more than a hundred Lexmark printer models, which Lexmark already warned about in June 2022 (the update had to be withdrawn again). Furthermore, the firmware update is supposed to fix the USB communication problem in Windows, which was caused by the July 2022 security update.
Vulnerability and printer issue
Since July 2022, owners of various Lexmark printers have been suffering from the problem that these devices only print incomprehensible stuff. The cause is the July 2022 security update for Windows – I had reported about it in the blog post
Windows: Printer issues after July 2022 patchday and fixes. Even if the problem is caused by a Microsoft update, the problem seems to be related to the firmware of the device.
The second issue in Lexmark printers is a vulnerability that affects more than a hundred models. Attackers who have already gained access to the printers' firmware can then infiltrate them via a vulnerability. Lexmark had already written the Security Advisory
CVE-2022-29850 (PDF) in June 2022, but then made another revision in August 2022.
However, the firmware updates provided had to be withdrawn at short notice after problems. Lexmark had then advised a revised firmware update for mid Sept 2022, which should fix the CVE-2022-29850 vulnerability in the firmware, but also fix the Windows printing issue. I had reported on this in the blog post
Lexmark: Firmware update to fix Windows bug and vulnerability CVE-2022-29850 in mid-Sept. 2022 in mid Sept 2022.
