logo

Lexmark Printers Firmware Extraction - Part C

ID: 04b7b85a-1bd1-59c3-b41d-eebcaba03c80

STIX ID: report--04b7b85a-1bd1-59c3-b41d-eebcaba03c80

Feed Name: Claroty Team82

Date Published: 2023-09-20

Date Updated: 2026-04-17

Author: Dan Hazeneshprong

...
...

This blog post documents a technical firmware reverse-engineering effort on a Lexmark MS811 printer: the author downloads an FLS update, locates and analyzes PJL handlers in on-device binaries, identifies embedded RSA public keys and AES usage, describes the encrypted section/header format and decryption workflow, and successfully extracts the kernel and filesystem images. The writeup explains the file format, key-loading logic, and extraction results for analysts, and does not describe an active compromise or exploit in the wild.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.