logo

Lexmark Printers Firmware Extraction - Part B

ID: ce42b77d-6b28-51c0-b439-270a2f807478

STIX ID: report--ce42b77d-6b28-51c0-b439-270a2f807478

Feed Name: Claroty Team82

Date Published: 2023-09-20

Date Updated: 2026-04-17

Author: Tal Zohar

...
...

This report documents reverse-engineering of a Lexmark MS811n printer firmware: extracting a 128MB NAND flash image, using binwalk to locate an ELF and multiple CramFS images, discovering a nonstandard i-node layout that prevented standard extraction, reverse-engineering and validating the modified i-node structure, patching cramfsck to successfully extract eight CramFS images (including kernel and rootfs), and enabling full analysis and modification of the firmware.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.