Read the docs
TI-2013-05143 Aliases CVE-2013-6032GHSA-2mpr-6qr3-q9cc

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x…

Priority MEDIUM 49CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P152, C78x through LC.IO.P187, X78x through LC2.IO.P335, C77x through LC.CM.P052, X772 through LC2.TR.P291, C53x through LS.SW.P069, C52x through LS.FA.P150, 25xxN through LCL.CU.P114, N4000 through LC.MD.P119, N4050e through GO.GO.N206, N70xxe through LC.CO.N309, E450 through LM.SZ.P124, E350 through LE.PH.P129, and E250 through LE.PM.P126 printers allows remote attackers to remove the Password Protect administrative password via the vac.255.GENPASSWORD parameter.

Why it matters now

EPSS 0.03271 88th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 23

CPEVersionsRoleVendor
cpe:2.3:h:lexmark:25xxn:*:*:*:*:*:*:*:*up to lcl.cu.p114VulnerableLexmark
cpe:2.3:h:lexmark:c52x:*:*:*:*:*:*:*:*up to ls.fa.p150VulnerableLexmark
cpe:2.3:h:lexmark:c53x:*:*:*:*:*:*:*:*up to ls.sw.p069VulnerableLexmark
cpe:2.3:h:lexmark:c77x:*:*:*:*:*:*:*:*up to lc.cm.p052VulnerableLexmark
cpe:2.3:h:lexmark:c78x:*:*:*:*:*:*:*:*up to lc.io.p187VulnerableLexmark
cpe:2.3:h:lexmark:c920:*:*:*:*:*:*:*:*up to ls.ta.p152VulnerableLexmark
cpe:2.3:h:lexmark:c935dn:*:*:*:*:*:*:*:*up to lc.jo.p091VulnerableLexmark
cpe:2.3:h:lexmark:e250:*:*:*:*:*:*:*:*up to le.pm.p126VulnerableLexmark
cpe:2.3:h:lexmark:e350:*:*:*:*:*:*:*:*up to le.ph.p129VulnerableLexmark
cpe:2.3:h:lexmark:e450:*:*:*:*:*:*:*:*up to lm.sz.p124VulnerableLexmark
  • cpe:2.3:h:lexmark:25xxn:*:*:*:*:*:*:*:* Versions up to lcl.cu.p114 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:c52x:*:*:*:*:*:*:*:* Versions up to ls.fa.p150 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:c53x:*:*:*:*:*:*:*:* Versions up to ls.sw.p069 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:c77x:*:*:*:*:*:*:*:* Versions up to lc.cm.p052 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:c78x:*:*:*:*:*:*:*:* Versions up to lc.io.p187 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:c920:*:*:*:*:*:*:*:* Versions up to ls.ta.p152 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:c935dn:*:*:*:*:*:*:*:* Versions up to lc.jo.p091 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:e250:*:*:*:*:*:*:*:* Versions up to le.pm.p126 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:e350:*:*:*:*:*:*:*:* Versions up to le.ph.p129 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:e450:*:*:*:*:*:*:*:* Versions up to lm.sz.p124 Vulnerable ·Lexmark
Show 13 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:lexmark:n4000:*:*:*:*:*:*:*:*up to lc.md.p119VulnerableLexmark
cpe:2.3:h:lexmark:n4050e:*:*:*:*:*:*:*:*up to go.go.n206VulnerableLexmark
cpe:2.3:h:lexmark:n70xxe:*:*:*:*:*:*:*:*up to lc.co.n309VulnerableLexmark
cpe:2.3:h:lexmark:t64x:*:*:*:*:*:*:*:*up to ls.st.p343VulnerableLexmark
cpe:2.3:h:lexmark:w840:*:*:*:*:*:*:*:*up to ls.ha.p252VulnerableLexmark
cpe:2.3:h:lexmark:x642:*:*:*:*:*:*:*:*up to lc2.mb.p318VulnerableLexmark
cpe:2.3:h:lexmark:x644:*:*:*:*:*:*:*:*up to lc4.be.p487VulnerableLexmark
cpe:2.3:h:lexmark:x646:*:*:*:*:*:*:*:*up to lc2.mc.p373VulnerableLexmark
cpe:2.3:h:lexmark:x64xef:*:*:*:*:*:*:*:*up to lc2.ti.p325VulnerableLexmark
cpe:2.3:h:lexmark:x772:*:*:*:*:*:*:*:*up to lc2.tr.p291VulnerableLexmark
cpe:2.3:h:lexmark:x78x:*:*:*:*:*:*:*:*up to lc2.io.p335VulnerableLexmark
cpe:2.3:h:lexmark:x85x:*:*:*:*:*:*:*:*up to lc4.be.p487VulnerableLexmark
cpe:2.3:h:lexmark:x94x:*:*:*:*:*:*:*:*up to lc.br.p141VulnerableLexmark
  • cpe:2.3:h:lexmark:n4000:*:*:*:*:*:*:*:* Versions up to lc.md.p119 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:n4050e:*:*:*:*:*:*:*:* Versions up to go.go.n206 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:n70xxe:*:*:*:*:*:*:*:* Versions up to lc.co.n309 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:t64x:*:*:*:*:*:*:*:* Versions up to ls.st.p343 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:w840:*:*:*:*:*:*:*:* Versions up to ls.ha.p252 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x642:*:*:*:*:*:*:*:* Versions up to lc2.mb.p318 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x644:*:*:*:*:*:*:*:* Versions up to lc4.be.p487 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x646:*:*:*:*:*:*:*:* Versions up to lc2.mc.p373 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x64xef:*:*:*:*:*:*:*:* Versions up to lc2.ti.p325 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x772:*:*:*:*:*:*:*:* Versions up to lc2.tr.p291 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x78x:*:*:*:*:*:*:*:* Versions up to lc2.io.p335 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x85x:*:*:*:*:*:*:*:* Versions up to lc4.be.p487 Vulnerable ·Lexmark
  • cpe:2.3:h:lexmark:x94x:*:*:*:*:*:*:*:* Versions up to lc.br.p141 Vulnerable ·Lexmark

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-6032
  2. 2026-10-03 Alias added: GHSA-2mpr-6qr3-q9cc

References

Advisory 1

Other 1

  • TI-2010-00097 The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet… CVSS 2.0HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences