Summary
Lexmark became aware of the OpenSSL v3.0 library vulnerabilities which is also known as CVE-2022-3786 and CVE-2022-3602, and immediately began working to understand the company’s exposure.
It has been identified that this has no affect on Lexmark products or business systems. Our internal assessment has concluded our products and business systems are running OpenSSL releases 1.1.1 and 1.0.2 which are not impacted by these vulnerabilities.