{"id":273009,"date":"2022-09-19T09:44:11","date_gmt":"2022-09-19T07:44:11","guid":{"rendered":"https:\/\/www.borncity.com\/blog\/?p=273009"},"modified":"2022-09-19T10:22:06","modified_gmt":"2022-09-19T08:22:06","slug":"lexmark-firmware-update-schliet-schwachstelle-und-korrigiert-windows-druckerproblem","status":"publish","type":"post","link":"https:\/\/borncity.com\/blog\/2022\/09\/19\/lexmark-firmware-update-schliet-schwachstelle-und-korrigiert-windows-druckerproblem\/","title":{"rendered":"Lexmark Firmware-Update schließt Schwachstelle und korrigiert Windows-Druckerproblem"},"content":{"rendered":"

\"Sicherheit[English<\/a>]Gute Nachrichten f\u00fcr Besitzer von Lexmark-Druckern. Der Hersteller hat endlich die Firmware-Updates f\u00fcr diverse Modelle bereitgestellt. Diese sollen einerseits eine Schwachstelle in mehr als Hundert Lexmark-Druckermodellen beseitigen, vor der Lexmark bereits im Juni 2022 gewarnt hat (das Update musste wieder zur\u00fcckgezogen werden). Weiterhin soll das Firmware-Update das USB-Kommunikationsproblem in Windows beheben, welches durch das Juli 2022-Sicherheitsupdate verursacht wurde.<\/p>\n

<\/p>\n

Worum geht es genau?<\/h2>\n

\"\"Seit Juli 2022 leiden Besitzer diverser Lexmark-Drucker unter dem Problem, dass diese Ger\u00e4te nur noch unverst\u00e4ndliches Zeug drucken. Ursache ist das Sicherheitsupdate f\u00fcr Windows vom Juli 2022 – ich hatte im Blog-Beitrag Windows: Druckerprobleme nach Juli 2022 Patchday und Fixes<\/a> dar\u00fcber berichtet. Auch wenn das Problem auf ein Microsoft-Update zur\u00fcckzuf\u00fchren ist, scheint das Problem beim Hersteller zu liegen.<\/p>\n

Die zweite Baustelle in Lexmark-Druckern ist eine Schwachstelle, die mehr als Hundert Modelle betrifft. Angreifer, die sich bereits Zugang zur Firmware der Drucker verschafft haben, k\u00f6nnen sich dann dort \u00fcber eine Schwachstelle einnisten. Lexmark hatte bereits im Juni 2022 das Security Advisory CVE-2022-29850<\/a> (PDF) verfasst, dann aber im August 2022 nochmals eine Revision vorgenommen.<\/p>\n

Die bereitgestellten Firmware-Updates mussten aber nach Problemen kurzfristig zur\u00fcckgezogen werden. Lexmark hatte dann ein revidiertes Firmware-Update f\u00fcr Mitte Sept. 2022 avisiert, welches die Schwachstelle CVE-2022-29850 in der Firmware beseitigen soll, aber auch das Windows-Druckproblem beheben soll. Ich hatte im Blog-Beitrag Lexmark: Firmware-Update soll Mitte Sept. 2022 Windows-Bug und Schwachstelle CVE-2022-29850 beseitigen<\/a> \u00fcber diesen Sachverhalt berichtet.<\/p>\n

Das Firmware-Update ist freigegeben<\/h2>\n

Blog-Leser Frederik S. hatte mir bereits letzten Donnerstag, den 15. September 2022, die Information per Mail zukommen lassen, dass die revidierte Firmware auf den Lexmark Supportseiten verf\u00fcgbar sei.<\/p>\n

als Information f\u00fcr Sie gibt es seit heute auf der Lexmark Support Seite den Download der Version 081.215, laut den Release Notes ist der USB Bug sowie die CVE-2022-29850 gefixt.<\/p><\/blockquote>\n

Auch hier im Blog hat Michael N. diesen Kommentar<\/a> hinterlassen, dass er die neuen Firmware-Updates auf der Lexmark-Seite gefunden habe (danke an beide Leser f\u00fcr den Hinweis):<\/p>\n

Bei Lexmark stehen f\u00fcr unsere Modelle ab heute die neue Firmwareversion 081.215 auf der Lexmark-Support-Seite zur Verf\u00fcgung. Die Release-Notes beschreiben viele Fehler, die behoben werden sollen. Auch ist die Rede von einer 081.212 Version, die ich aber nie gesehen habe, vielleicht war diese auch nicht \u00f6ffentlich.<\/p><\/blockquote>\n

Lexmark hat inzwischen diesen Support-Beitrag<\/a> zum USB-Druckerproblem ver\u00f6ffentlicht und schreibt: Aktualisieren Sie den Drucker auf xxxxx.081.215 oder die neueste RIP-Firmware-Version. <\/em>Das kann \u00fcber die EWS-Funktion des Druckers (erfordert eine Netzwerkverbindung ins Internet) oder per Download der Firmware von den Lexmark-Supporsteiten und durch Kopieren dieser Version auf einen USB-Stick, Einstecken dieses Sticks in den USB-Anschluss des Druckers (falls vorhanden) und anschlie\u00dfendes Ausw\u00e4hlen dieser Version, erfolgen. Hinweise zum Firmware-Update gibt es auch auf dieser Lexmark-Supportseite<\/a> – die Downloads sollten \u00fcber diese Lexmark Driver-Download-Seite<\/a> nach Eingabe des Modells m\u00f6glich sein. Die Firmware wurde dort wohl am 16. September 2022 ver\u00f6ffentlicht (wobei noch nicht alle Modelle Updates erhalten haben). Nachfolgend findet sich ein Auszug aus den Release Notes.<\/p>\n

\n
RELEASE NOTES: xxxAT.081.215, xxxBD.081.215, xxxBL.081.215, \r\nxxxBN.081.215, xxx.GM.081.215, xxx.GW.081.215, xxxMH.081.215, \r\nxxxMM.081.215, xxxPC.081.215, xxxPM.081.215, xxxPP.081.215, \r\nxxxSG.081.215, xxxZJ.081.215 \r\n\u00a0\r\nREAD THIS FIRST: Special notes and considerations \r\n\u00a0\r\n\u2212\u00a0 ***IMPORTANT*** If using Scan Center with a non-default value (default = \"-1\") for the \r\nUCF settings de_network_fwCompatibilityLevel*, users must review the following \r\nKnowledge Base article before upgrading to this release (this is not common): \r\n\u2212\u00a0 Scanning from Scan Center causes 900.00 error<\/a>\r\n\u2212\u00a0 Although this URL is specifically for the MX822, this article is applicable to all \r\nmulti-function devices (MFP's) using Scan Center \r\n\u2212\u00a0 Firmware upgrade warning: \r\n\u2212\u00a0 Any device running FW5.1 or older (xxxxx.051.yyy or smaller numbers) must first \r\nupdate to a FW7 based release such as xxxxx.076.308 before upgrading to \r\nxxxxx.081.001 or newer releases \r\n\u2212\u00a0 MS32x-MS62x\/MX32x-MX62x Series devices and their equivalents running \r\nxxxGM.04y.zzz firmware must first update to a firmware release between \r\nxxxGM.070.001 and xxxGM.075.289 as an initial intermediate release before \r\nupdating to xxxxx.081.001 or newer releases \r\n\u2212\u00a0 CS72x\/CX72x Series devices and their equivalents running ATL.03x.yyy or \r\nATL.02x.yyy firmware must first update to CSTAT.041.090 or CXTAT.041.090 as \r\nan initial intermediate release before updating to a FW7 based release, such as \r\nxxxxx.076.308, and then finally updating to xxxxx.081.001 or newer releases \r\n\u2212\u00a0 CS82x\/CX82x and CX86x Series devices and their equivalents running \r\nxxxPP.075.yyy or older firmware AND with extra memory (RAM) installed must \r\nfirst update to a FW7.6 based release such as xxxPP.076.308 before upgrading \r\nto xxxPP.081.001 or newer releases \r\n\u2212\u00a0 Contact Lexmark Technical Support to obtain intermediate releases if needed\u00a0 \r\n\u2212\u00a0 Firmware downgrade warning: \r\n\u2212\u00a0 Devices manufactured with xxxxx.080.001 or newer firmware cannot have \r\nfirmware downgraded below the manufactured level \r\n\u2212\u00a0 For all other devices, it is strongly recommended that a firmware downgrade is \r\nNOT performed \r\n\u2212\u00a0 Downgrading firmware from newer major firmware ECs to older major firmware \r\nECs will result in the loss of Apps, Security Features, and Settings \r\n\u2212\u00a0 Contact Lexmark Technical Support and see KB Article SO8017 for more \r\ninformation on the impacts of downgrading \r\n\u2212\u00a0 Ensure the firmware you download is the correct one for the product you have<\/code><\/pre>\n
CUSTOMER RELEASE NOTES:
\nFW8.1, xxxAT.081.215, xxxBD.081.215, xxxBL.081.215, xxxBN.081.215,
\nxxxGM.081.215, xxxGW.081.215, xxxMH.081.215, xxxMM.081.215, PC.081.215,
\nxxxPM.081.215, xxxPP.081.215, xxxSG.081.215, and xxxZJ.081.215 for the following
\ndevices<\/p>\n
Changes in 081.215 (since 081.212):
\nSecurity Issues Addressed:
\n\u2212\u00a0 Upgraded open-source components to apply latest security patches
\nField Issues Addressed and Other Improvements:
\n\u2212\u00a0 Improvements to firmware flashing reliability
\n\u2212\u00a0 Fix for an issue where using the \"Fit to Page\" setting on the printer results in a
\ncorrupted output for some print jobs
\n\u2212\u00a0 Fix for an issue where the CS\/CX73x devices are not responding to adjustments
\nto the left margin on the multipurpose feeder or input option trays (CSTMM and
\nCXTMM firmware)
\n\u2212\u00a0 Fix for an \"unsupported USB hub\" error on some devices with Marknet N8372
\noptions installed
\n\u2212\u00a0 Fix for an issue where \"fold\" settings for Copy shortcuts were not applied
\ncorrectly when the shortcut was launched via Shortcut Center
\n\u2212\u00a0 Fix for an unexpected output received when printing via USB cable from a
\ncomputer running Windows10 patched with KB5015807 or newer
\n\u2212\u00a0 Fix for a 912.32A crash on CS\/CX33x devices and their equivalents (CSLBL and
\nCXLBL firmware)
\n\u2212\u00a0 Update default print resolution of mono devices to 1200IQ to improve interaction
\nwith newer drivers and\/or driverless print options.\u00a0 NOTE: device print resolution
\nsetting will not be changed by applying this firmware update, a restore factory
\ndefaults or out of service erase would have to be performed after installing this
\nupdate for the new default to apply
\n\u2212\u00a0 Fixes for multiple fax issues
\n\u25aa\u00a0 Fix for an issue where devices with fax modems are stuck with \"Busy,
\nplease wait\" on screen during some boot up operations
\n\u25aa\u00a0 Fix for a missing \"Fax Transport\" setting in some configurations
\n\u25aa\u00a0 Fix for an inability to receive some HTTPS faxes
\n\u2212\u00a0 Fixes for multiple sources of 900.00 errors
\n\u25aa\u00a0 Fix for a 900.00 Kernel crash when connected via USB cable to a
\ncomputer running Windows10 patched with KB5015807 or newer
\n\u25aa\u00a0 Fix for an intermittent 900.00 crash when performing a Card Copy job or a
\nquick copy job (start copying by pressing green button from home screen)
\n\u25aa\u00a0 Fix for a 900.00 crash that occurs with some JBIG faxes \u25aa\u00a0 Fix for a reoccurring 900.00 crash every time the device powers up
\n\u25aa\u00a0 Fix for a 900.00 crash that occurs after the printer has been idle\/asleep
\nfor multiple hours on CS\/CX82x and CX86x devices and their equivalents
\n(CSTPP and CXTPP firmware)
\n\u25aa\u00a0 Fix for a 900.00 crash while printing using CS\/CX33x devices and their
\nequivalents (CSLBL and CXLBL firmware)
\n\u25aa\u00a0 Fix for a 900.00 crash that occurs when switching wireless access points
\n(changing SSID's)
\n\u25aa\u00a0 Fix for an intermittent 900.00 crash when using some HTTPS fax
\nfunctions<\/p>\n
Changes in 081.212 (since 081.205):
\nSecurity Issues Addressed:
\n\u2212\u00a0 Upgraded open-source components to apply latest security patches
\nField Issues Addressed and Other Improvements:
\n\u2212\u00a0 Fix for an issue where the printer does not boot all the way to a usable state after
\nupdating firmware (sometimes stuck at \"Busy, please wait\", sometimes earlier in
\nboot)
\n\u2212\u00a0 Fix for an issue where CS\/CX82x and CX86x devices fail to boot if they have
\n4GB of RAM or more installed (CSTPP and CXTPP firmware)
\n\u2212\u00a0 Fix for an issue where faxes are not sent successfully if \"cover page\" is enabled
\nor \"hold the job\" is enabled and certain security configurations are present
\n\u2212\u00a0 Fix for an issue where the Lexmark Cloud Services Native Agent running on the
\ndevice intermittently stops communicating with the Lexmark Cloud
\n\u2212\u00a0 Prevent Lexmark Cloud Services connection from disabling itself when network
\nconnection is lost
\n\u2212\u00a0 Fix for an issue where devices intermittently fail during SMB communication to a
\nWindows Server with STATUS_ACCESS_DENIED or
\nSTATUS_DUPLICATE_OBJECTID
\n\u2212\u00a0 Fix to improve output from some MS\/MX72x and MS\/MX82x printers which
\nintermittently printed too light or too dark (MSNGW, MSTGW, and MXTGW
\nfirmware)
\n\u2212\u00a0 Fix for an \"incorrect printer time\" error message at device power on
\n\u2212\u00a0 Fix for an issue where the secure element is intermittently not detected at device
\npower on causing an \"Error communicating with the secure element\" message to
\nappear on the device
\n\u2212\u00a0 Allow scanner firmware update even if scanner is disabled on CX92x devices
\n\u2212\u00a0 Fix for an issue where the device stops scanning in the middle of a job initiated
\nby an eSF app and remains stuck
\n\u2212\u00a0 Fix for a 912.45A crash on the CS\/CX33x devices and their equivalents (CSLBL
\nand CXLBL firmware)
\n\u2212\u00a0 Fix for an issue where MB2236 devices with a 2.8\" touch screen boot into the
\n\"special boot options\" menu if the paper tray is empty (MXLSG firmware – 2.8\"
\ntouch screen operator panel only) \u2212\u00a0 eSCL scanning support for different resolutions for each color mode
\n\u2212\u00a0 Fix for an issue where import of PKCS12 device certificates fails
\n\u2212\u00a0 Updated some strings and translations for enhanced user experience
\n\u2212\u00a0 Multiple fixes for PDF and PCL-XL emulator errors
\n\u2212\u00a0 Fix for an 842.02 crash when performing a scan job on CX42x-62x devices
\n(CXNZJ and CXTZJ firmware)
\n\u2212\u00a0 Return printer network address instead of local-host when querying printer-more-
\ninfo URI IPP attribute
\n\u2212\u00a0 Fixes for multiple sources of 900.00 errors
\n\u25aa\u00a0 Fix for an intermittent 900.00 crash only on network connected printers
\n\u25aa\u00a0 Fix for a 900.00 crash when tapping \"Connected to Network\" on the
\ndevice operator panel
\n\u25aa\u00a0 Fix for intermittent 900.00 crashes at device boot up on the CS\/CX72x
\ndevices and their equivalents (CSTAT and CXTAT firmware)
\n\u25aa\u00a0 Fix for other intermittent 900.00 crashes<\/p>\n
Changes in 081.205 (since 081.016):
\nSecurity Issues Addressed:
\n\u2212\u00a0 Additional mitigations for CVE-2022-29850 Compromised device remains
\nvulnerable after firmware update
\n\u2212\u00a0 Upgraded open-source components to apply latest security patches
\n\u2212\u00a0 Security improvements based on internal testing
\nField Issues Addressed and Other Improvements:
\n\u2212\u00a0 Add support for space characters in SNMP Community Name
\n\u2212\u00a0 Adjust Fax Volume settings to support new fax card for certain devices (MXLBD,
\nCXLBL, and CXLBN firmware)
\n\u2212\u00a0 Fix for an issue where \"Keyboard Type\" setting must be changed twice in order
\nto take effect
\n\u2212\u00a0 Increase time necessary to hold keyboard button before extra characters appear
\nin order to reduce inadvertent clicks
\n\u2212\u00a0 Added \"Test SMTP Connection\" button to SMTP setup menu to improve setup
\nusability
\n\u2212\u00a0 Resolve an issue where adding\/removing \"Held Jobs\" from Home Screen
\nCustomization via printer web page intermittently doesn't refresh the op panel
\nand\/or web page correctly
\n\u2212\u00a0 Fix for an issue where LDAP authentication fails in some environments using
\nusername and password, but succeeds with username only
\n\u2212\u00a0 Resolve an issue where, under certain conditions, the printer web page
\nintermittently shows the printer status as \"Busy\" even if the printer is not in busy
\nstate
\n\u2212\u00a0 Improvement to ensure apps are able to automatically scroll a list to the currently
\nselected item during a change prompt if the list is longer than one screen \u2013 for example, a list of languages where the currently selected language may be
\ntoward the middle or bottom of the list
\n\u2212\u00a0 Fix for an issue that causes firmware updates to intermittently fail on some
\ndevices
\n\u2212\u00a0 Improve messaging for firmware version comparison when updating via the
\nprinter web page
\n\u2212\u00a0 Fixes for multiple sources of 900.00 errors<\/p>\n
Changes in 081.016:
\nNew Features:
\n\u2212\u00a0 Improved usability on 2.8-inch touchscreen devices
\n\u2212\u00a0 Improved Initial Setup Wizard usability experience
\n\u2212\u00a0 Added opt-out model for anonymous data collection
\n\u2212\u00a0 New TPM hardware support
\n\u2212\u00a0 TLS v1.3 Server Support
\n\u2212\u00a0 WPA v3.0 support
\n\u2212\u00a0 IPP Everywhere 1.1
\n\u2212\u00a0 Universal Print \u2013 Phase 2
\n\u2212\u00a0 Node locked setting bundles
\n\u2212\u00a0 Open Source JDK
\n\u2212\u00a0 Custom Factory Defaults support
\n\u2212\u00a0 Improved staple logic (Held Jobs)
\nSecurity Issues Addressed:
\n\u2212\u00a0 CVE-2022-29850 Compromised device remains vulnerable after firmware update
\n\u2212\u00a0 Upgraded open source components to apply latest security patches
\n\u2212\u00a0 Security improvements based on internal testing
\nField Issues Addressed and Other Improvements:
\n\u2212\u00a0 Improved enrollment to Lexmark Cloud Services
\n\u2212\u00a0 Fix for an issue where certain Cipher List changes are not saved successfully
\n\u2212\u00a0 Added validation checking to General Fax Settings, Fax Server, and Email Reply
\nAddress fields
\n\u2212\u00a0 Multiple fixes for fax receive issues
\n\u2212\u00a0 Resolve a permissions issue with installed userflash
\n\u2212\u00a0 Fix for an issue where an HBP driver generated job does not print on certain
\ndevices
\n\u2212\u00a0 Multiple fixes for PS, PDF, and PCL emulator errors<\/p>\n
<\/code><\/pre>\n
 <\/p>\n
<\/code><\/pre>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"
[English]Gute Nachrichten f\u00fcr Besitzer von Lexmark-Druckern. Der Hersteller hat endlich die Firmware-Updates f\u00fcr diverse Modelle bereitgestellt. Diese sollen einerseits eine Schwachstelle in mehr als Hundert Lexmark-Druckermodellen beseitigen, vor der Lexmark bereits im Juni 2022 gewarnt hat (das Update musste wieder … Weiterlesen →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[731,11,426,185,301],"tags":[614,24,4328,4315,3288],"class_list":["post-273009","post","type-post","status-publish","format-standard","hentry","category-gerate","category-problemlosung","category-sicherheit","category-update","category-windows","tag-drucker","tag-problem","tag-sicherheit","tag-update","tag-windows-en"],"_links":{"self":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/273009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/comments?post=273009"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/273009\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/media?parent=273009"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/categories?post=273009"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/tags?post=273009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}