Read the docs
TI-2011-03909 Aliases CVE-2011-4538GHSA-v2r7-6rp8-j3j6

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive…

Priority LOW 26CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

Lexmark X, W, T, E, and C devices before 2012-02-09 allow attackers to obtain sensitive information by reading passwords within exported settings.

Why it matters now

EPSS 0.00871 59th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 66

CPEVersionsRoleVendor
cpe:2.3:o:lexmark:x860_firmware:*:*:*:*:*:*:*:*up to lp.sp.p108VulnerableLexmark
cpe:2.3:h:lexmark:x860:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x862_firmware:*:*:*:*:*:*:*:*up to lp.sp.p108VulnerableLexmark
cpe:2.3:h:lexmark:x862:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x864_firmware:*:*:*:*:*:*:*:*up to lp.sp.p108VulnerableLexmark
cpe:2.3:h:lexmark:x864:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x734_firmware:*:*:*:*:*:*:*:*up to lr.fl.p224cVulnerableLexmark
cpe:2.3:h:lexmark:x734:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x736_firmware:*:*:*:*:*:*:*:*up to lr.fl.p224cVulnerableLexmark
cpe:2.3:h:lexmark:x736:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
  • cpe:2.3:o:lexmark:x860_firmware:*:*:*:*:*:*:*:* Versions up to lp.sp.p108 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x860:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x862_firmware:*:*:*:*:*:*:*:* Versions up to lp.sp.p108 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x862:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x864_firmware:*:*:*:*:*:*:*:* Versions up to lp.sp.p108 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x864:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x734_firmware:*:*:*:*:*:*:*:* Versions up to lr.fl.p224c Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x734:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x736_firmware:*:*:*:*:*:*:*:* Versions up to lr.fl.p224c Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x736:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
Show 56 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:lexmark:x738_firmware:*:*:*:*:*:*:*:*up to lr.fl.p224cVulnerableLexmark
cpe:2.3:h:lexmark:x738:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x651_firmware:*:*:*:*:*:*:*:*up to lr.mn.p224aVulnerableLexmark
cpe:2.3:h:lexmark:x651:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x652_firmware:*:*:*:*:*:*:*:*up to lr.mn.p224aVulnerableLexmark
cpe:2.3:h:lexmark:x652:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x654_firmware:*:*:*:*:*:*:*:*up to lr.mn.p224aVulnerableLexmark
cpe:2.3:h:lexmark:x654:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x656_firmware:*:*:*:*:*:*:*:*up to lr.mn.p224aVulnerableLexmark
cpe:2.3:h:lexmark:x656:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x658_firmware:*:*:*:*:*:*:*:*up to lr.mn.p224aVulnerableLexmark
cpe:2.3:h:lexmark:x658:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x543_firmware:*:*:*:*:*:*:*:*up to ll.el.p511VulnerableLexmark
cpe:2.3:h:lexmark:x543:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x544_firmware:*:*:*:*:*:*:*:*up to ll.el.p511VulnerableLexmark
cpe:2.3:h:lexmark:x544:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x546_firmware:*:*:*:*:*:*:*:*up to ll.el.p511VulnerableLexmark
cpe:2.3:h:lexmark:x546:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x463_firmware:*:*:*:*:*:*:*:*up to lr.bs.p224aVulnerableLexmark
cpe:2.3:h:lexmark:x463:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x464_firmware:*:*:*:*:*:*:*:*up to lr.bs.p224aVulnerableLexmark
cpe:2.3:h:lexmark:x464:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x466_firmware:*:*:*:*:*:*:*:*up to lr.bs.p224aVulnerableLexmark
cpe:2.3:h:lexmark:x466:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x363_firmware:*:*:*:*:*:*:*:*up to ll.bz.p511VulnerableLexmark
cpe:2.3:h:lexmark:x363:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:x364_firmware:*:*:*:*:*:*:*:*up to ll.bz.p511VulnerableLexmark
cpe:2.3:h:lexmark:x364:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:w850_firmware:*:*:*:*:*:*:*:*up to lp.jb.p108VulnerableLexmark
cpe:2.3:h:lexmark:w850:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:t650_firmware:*:*:*:*:*:*:*:*up to lr.jp.p224aVulnerableLexmark
cpe:2.3:h:lexmark:t650:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:t652_firmware:*:*:*:*:*:*:*:*up to lr.jp.p224aVulnerableLexmark
cpe:2.3:h:lexmark:t652:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:t654_firmware:*:*:*:*:*:*:*:*up to lr.jp.p224aVulnerableLexmark
cpe:2.3:h:lexmark:t654:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:e460_firmware:*:*:*:*:*:*:*:*up to lr.lbh.p224aVulnerableLexmark
cpe:2.3:h:lexmark:e460:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:e462_firmware:*:*:*:*:*:*:*:*up to lr.lbh.p224aVulnerableLexmark
cpe:2.3:h:lexmark:e462:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:e360_firmware:*:*:*:*:*:*:*:*up to ll.lbm.p511VulnerableLexmark
cpe:2.3:h:lexmark:e360:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:e260_firmware:*:*:*:*:*:*:*:*up to ll.lbl.p511VulnerableLexmark
cpe:2.3:h:lexmark:e260:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:c734_firmware:*:*:*:*:*:*:*:*up to lr.sk.p224aVulnerableLexmark
cpe:2.3:h:lexmark:c734:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:c736_firmware:*:*:*:*:*:*:*:*up to lr.sk.p224aVulnerableLexmark
cpe:2.3:h:lexmark:c736:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:c546_firmware:*:*:*:*:*:*:*:*up to lu.as.p511VulnerableLexmark
cpe:2.3:h:lexmark:c546:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:c540_firmware:*:*:*:*:*:*:*:*up to ll.as.p511VulnerableLexmark
cpe:2.3:h:lexmark:c540:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:c543_firmware:*:*:*:*:*:*:*:*up to ll.as.p511VulnerableLexmark
cpe:2.3:h:lexmark:c543:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
cpe:2.3:o:lexmark:c544_firmware:*:*:*:*:*:*:*:*up to ll.as.p511VulnerableLexmark
cpe:2.3:h:lexmark:c544:-:*:*:*:*:*:*:*not specified by NVDRunning onLexmark
  • cpe:2.3:o:lexmark:x738_firmware:*:*:*:*:*:*:*:* Versions up to lr.fl.p224c Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x738:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x651_firmware:*:*:*:*:*:*:*:* Versions up to lr.mn.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x651:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x652_firmware:*:*:*:*:*:*:*:* Versions up to lr.mn.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x652:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x654_firmware:*:*:*:*:*:*:*:* Versions up to lr.mn.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x654:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x656_firmware:*:*:*:*:*:*:*:* Versions up to lr.mn.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x656:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x658_firmware:*:*:*:*:*:*:*:* Versions up to lr.mn.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x658:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x543_firmware:*:*:*:*:*:*:*:* Versions up to ll.el.p511 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x543:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x544_firmware:*:*:*:*:*:*:*:* Versions up to ll.el.p511 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x544:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x546_firmware:*:*:*:*:*:*:*:* Versions up to ll.el.p511 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x546:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x463_firmware:*:*:*:*:*:*:*:* Versions up to lr.bs.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x463:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x464_firmware:*:*:*:*:*:*:*:* Versions up to lr.bs.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x464:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x466_firmware:*:*:*:*:*:*:*:* Versions up to lr.bs.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x466:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x363_firmware:*:*:*:*:*:*:*:* Versions up to ll.bz.p511 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x363:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:x364_firmware:*:*:*:*:*:*:*:* Versions up to ll.bz.p511 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x364:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:w850_firmware:*:*:*:*:*:*:*:* Versions up to lp.jb.p108 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:w850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:t650_firmware:*:*:*:*:*:*:*:* Versions up to lr.jp.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:t650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:t652_firmware:*:*:*:*:*:*:*:* Versions up to lr.jp.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:t652:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:t654_firmware:*:*:*:*:*:*:*:* Versions up to lr.jp.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:t654:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:e460_firmware:*:*:*:*:*:*:*:* Versions up to lr.lbh.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:e460:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:e462_firmware:*:*:*:*:*:*:*:* Versions up to lr.lbh.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:e462:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:e360_firmware:*:*:*:*:*:*:*:* Versions up to ll.lbm.p511 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:e360:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:e260_firmware:*:*:*:*:*:*:*:* Versions up to ll.lbl.p511 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:e260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:c734_firmware:*:*:*:*:*:*:*:* Versions up to lr.sk.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:c734:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:c736_firmware:*:*:*:*:*:*:*:* Versions up to lr.sk.p224a Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:c736:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:c546_firmware:*:*:*:*:*:*:*:* Versions up to lu.as.p511 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:c546:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:c540_firmware:*:*:*:*:*:*:*:* Versions up to ll.as.p511 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:c540:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:c543_firmware:*:*:*:*:*:*:*:* Versions up to ll.as.p511 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:c543:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
  • cpe:2.3:o:lexmark:c544_firmware:*:*:*:*:*:*:*:* Versions up to ll.as.p511 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:c544:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-4538
  2. 2026-10-03 Alias added: GHSA-v2r7-6rp8-j3j6

References

Advisory 1

  • TI-2011-02897 Lexmark X, W, T, E, C, 6500e, and 25xxN devices before 2011-11-15 allow attackers to… CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences