Unauthenticated code execution via relative path traversal

Path traversal in the Embedded Solutions Framework in Lexmark devices allows remote attackers to execute code as an unprivileged user. Lexmark has not published the affected ESF request handler, traversed path parameter, or filesystem operation that enables code execution. No authentication or user interaction is required; successful exploitation runs attacker-controlled code remotely with unprivileged device permissions.