Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory…
Priority LOW 36CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.
Summary
Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.
Why it matters now
EPSS 0.01655 76th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 98
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lexmark:6500e_firmware:*:*:*:*:*:*:*:* | before lhs60.jr.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:c748_firmware:*:*:*:*:*:*:*:* | before lhs60.cm4.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:c79x_firmware:*:*:*:*:*:*:*:* | before lhs60.hc.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:c79x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:c925_firmware:*:*:*:*:*:*:*:* | before lhs60.hv.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:c95x_firmware:*:*:*:*:*:*:*:* | before lhs60.tp.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:c95x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
- cpe:2.3:o:lexmark:6500e_firmware:*:*:*:*:*:*:*:* Versions before lhs60.jr.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:6500e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:c748_firmware:*:*:*:*:*:*:*:* Versions before lhs60.cm4.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:c748:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:c79x_firmware:*:*:*:*:*:*:*:* Versions before lhs60.hc.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:c79x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:c925_firmware:*:*:*:*:*:*:*:* Versions before lhs60.hv.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:c925:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:c95x_firmware:*:*:*:*:*:*:*:* Versions before lhs60.tp.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:c95x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
Show 88 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lexmark:cs41x_firmware:*:*:*:*:*:*:*:* | before lw71.vy2.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:cs41x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:cs51x_firmware:*:*:*:*:*:*:*:* | before lw71.vy4.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:cs51x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:cs748_firmware:*:*:*:*:*:*:*:* | up to lhs60.cm4.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:cs796_firmware:*:*:*:*:*:*:*:* | before lhs60.hc.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:cx410_firmware:*:*:*:*:*:*:*:* | before lw71.gm4.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:cx510_firmware:*:*:*:*:*:*:*:* | before lw71.gm7.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:m3150_firmware:*:*:*:*:*:*:*:* | before lw71.pr4.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:m3150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:m5155_firmware:*:*:*:*:*:*:*:* | before lw71.dn4.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:m5163_firmware:*:*:*:*:*:*:*:* | before lw71.dn4.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:m5163:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:m5170_firmware:*:*:*:*:*:*:*:* | before lw71.dn7.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:ms610de_firmware:*:*:*:*:*:*:*:* | before lw71.pr4.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:ms610de:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:ms610dte_firmware:*:*:*:*:*:*:*:* | before lw71.pr4.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:ms610dte:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:ms810de_firmware:*:*:*:*:*:*:*:* | before lw71.dn4.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:ms812de_firmware:*:*:*:*:*:*:*:* | before lw71.dn7.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:ms91x_firmware:*:*:*:*:*:*:*:* | before lw71.sa.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:ms91x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:mx410_firmware:*:*:*:*:*:*:*:* | before lw71.sb4.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:mx410:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:mx510_firmware:*:*:*:*:*:*:*:* | before lw71.sb4.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:mx510:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:mx511_firmware:*:*:*:*:*:*:*:* | before lw71.sb4.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:mx511:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:mx610_firmware:*:*:*:*:*:*:*:* | before lw71.sb7.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:mx611_firmware:*:*:*:*:*:*:*:* | before lw71.sb7.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:mx6500e_firmware:*:*:*:*:*:*:*:* | up to lw71.jd.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:mx71x_firmware:*:*:*:*:*:*:*:* | before lw71.tu.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:mx71x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:mx81x_firmware:*:*:*:*:*:*:*:* | before lw71.tu.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:mx81x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:mx91x_firmware:*:*:*:*:*:*:*:* | before lw71.mg.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:mx91x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:sm91x_firmware:*:*:*:*:*:*:*:* | before lw71.mg.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:sm91x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:x46x_firmware:*:*:*:*:*:*:*:* | before lr.bs.p810 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:x46x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:x548_firmware:*:*:*:*:*:*:*:* | before lhs60.vk.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:x65x_firmware:*:*:*:*:*:*:*:* | before lr.mn.p810 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:x65x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:x73x_firmware:*:*:*:*:*:*:*:* | before lr.fl.p810 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:x73x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:x74x_firmware:*:*:*:*:*:*:*:* | before lhs60.ny.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:x74x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:x792_firmware:*:*:*:*:*:*:*:* | before lhs60.mr.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:x86x_firmware:*:*:*:*:*:*:*:* | before lr.sp.p810 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:x86x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:x925_firmware:*:*:*:*:*:*:*:* | before lhs60.hk.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:x95x_firmware:*:*:*:*:*:*:*:* | before lhs60.tq.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:x95x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:xc2132_firmware:*:*:*:*:*:*:*:* | before lw71.gm7.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:xm1145_firmware:*:*:*:*:*:*:*:* | before lw71.sb4.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:xm1145:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:xm3150_firmware:*:*:*:*:*:*:*:* | before lw71.sb7.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:xm51xx_firmware:*:*:*:*:*:*:*:* | before lw71.tu.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:xm51xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:xm71xx_firmware:*:*:*:*:*:*:*:* | before lw71.tu.p216 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:xm71xx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:xs478_firmware:*:*:*:*:*:*:*:* | before lhs60.ny.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:xs478:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:xs548_firmware:*:*:*:*:*:*:*:* | before lhs60.vk.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:xs79x_firmware:*:*:*:*:*:*:*:* | before lhs60.mr.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:xs79x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:xs925_firmware:*:*:*:*:*:*:*:* | before lhs60.hk.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
| cpe:2.3:o:lexmark:xs95x_firmware:*:*:*:*:*:*:*:* | before lhs60.tq.p683 | Vulnerable | Lexmark |
| cpe:2.3:h:lexmark:xs95x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lexmark |
- cpe:2.3:o:lexmark:cs41x_firmware:*:*:*:*:*:*:*:* Versions before lw71.vy2.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:cs41x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:cs51x_firmware:*:*:*:*:*:*:*:* Versions before lw71.vy4.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:cs51x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:cs748_firmware:*:*:*:*:*:*:*:* Versions up to lhs60.cm4.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:cs748:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:cs796_firmware:*:*:*:*:*:*:*:* Versions before lhs60.hc.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:cs796:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:cx410_firmware:*:*:*:*:*:*:*:* Versions before lw71.gm4.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:cx410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:cx510_firmware:*:*:*:*:*:*:*:* Versions before lw71.gm7.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:cx510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:m3150_firmware:*:*:*:*:*:*:*:* Versions before lw71.pr4.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:m3150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:m5155_firmware:*:*:*:*:*:*:*:* Versions before lw71.dn4.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:m5155:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:m5163_firmware:*:*:*:*:*:*:*:* Versions before lw71.dn4.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:m5163:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:m5170_firmware:*:*:*:*:*:*:*:* Versions before lw71.dn7.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:m5170:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:ms610de_firmware:*:*:*:*:*:*:*:* Versions before lw71.pr4.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:ms610de:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:ms610dte_firmware:*:*:*:*:*:*:*:* Versions before lw71.pr4.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:ms610dte:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:ms810de_firmware:*:*:*:*:*:*:*:* Versions before lw71.dn4.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:ms810de:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:ms812de_firmware:*:*:*:*:*:*:*:* Versions before lw71.dn7.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:ms812de:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:ms91x_firmware:*:*:*:*:*:*:*:* Versions before lw71.sa.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:ms91x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:mx410_firmware:*:*:*:*:*:*:*:* Versions before lw71.sb4.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:mx410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:mx510_firmware:*:*:*:*:*:*:*:* Versions before lw71.sb4.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:mx510:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:mx511_firmware:*:*:*:*:*:*:*:* Versions before lw71.sb4.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:mx511:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:mx610_firmware:*:*:*:*:*:*:*:* Versions before lw71.sb7.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:mx610:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:mx611_firmware:*:*:*:*:*:*:*:* Versions before lw71.sb7.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:mx611:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:mx6500e_firmware:*:*:*:*:*:*:*:* Versions up to lw71.jd.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:mx6500e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:mx71x_firmware:*:*:*:*:*:*:*:* Versions before lw71.tu.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:mx71x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:mx81x_firmware:*:*:*:*:*:*:*:* Versions before lw71.tu.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:mx81x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:mx91x_firmware:*:*:*:*:*:*:*:* Versions before lw71.mg.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:mx91x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:sm91x_firmware:*:*:*:*:*:*:*:* Versions before lw71.mg.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:sm91x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:x46x_firmware:*:*:*:*:*:*:*:* Versions before lr.bs.p810 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:x46x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:x548_firmware:*:*:*:*:*:*:*:* Versions before lhs60.vk.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:x548:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:x65x_firmware:*:*:*:*:*:*:*:* Versions before lr.mn.p810 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:x65x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:x73x_firmware:*:*:*:*:*:*:*:* Versions before lr.fl.p810 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:x73x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:x74x_firmware:*:*:*:*:*:*:*:* Versions before lhs60.ny.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:x74x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:x792_firmware:*:*:*:*:*:*:*:* Versions before lhs60.mr.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:x792:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:x86x_firmware:*:*:*:*:*:*:*:* Versions before lr.sp.p810 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:x86x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:x925_firmware:*:*:*:*:*:*:*:* Versions before lhs60.hk.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:x925:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:x95x_firmware:*:*:*:*:*:*:*:* Versions before lhs60.tq.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:x95x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:xc2132_firmware:*:*:*:*:*:*:*:* Versions before lw71.gm7.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:xc2132:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:xm1145_firmware:*:*:*:*:*:*:*:* Versions before lw71.sb4.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:xm1145:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:xm3150_firmware:*:*:*:*:*:*:*:* Versions before lw71.sb7.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:xm3150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:xm51xx_firmware:*:*:*:*:*:*:*:* Versions before lw71.tu.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:xm51xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:xm71xx_firmware:*:*:*:*:*:*:*:* Versions before lw71.tu.p216 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:xm71xx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:xs478_firmware:*:*:*:*:*:*:*:* Versions before lhs60.ny.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:xs478:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:xs548_firmware:*:*:*:*:*:*:*:* Versions before lhs60.vk.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:xs548:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:xs79x_firmware:*:*:*:*:*:*:*:* Versions before lhs60.mr.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:xs79x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:xs925_firmware:*:*:*:*:*:*:*:* Versions before lhs60.hk.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:xs925:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
- cpe:2.3:o:lexmark:xs95x_firmware:*:*:*:*:*:*:*:* Versions before lhs60.tq.p683 Vulnerable ·Lexmark
- cpe:2.3:h:lexmark:xs95x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lexmark
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-18894
- 2026-10-03 Alias added: GHSA-26xq-4h5f-fhh8
References
More Lexmark 6500e Firmware vulnerabilities
- TI-2021-20248 Embedded web server input sanitization vulnerability in Lexmark devices through… CVSS 3.1CRITICAL 9.8
- TI-2021-20252 Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter. CVSS 3.1CRITICAL 9.8
- TI-2019-07304 Various Lexmark products have a Buffer Overflow (issue 3 of 3). CVSS 3.0CRITICAL 9.8
- TI-2019-07303 Various Lexmark products have a Buffer Overflow (issue 2 of 3). CVSS 3.0CRITICAL 9.8
- TI-2019-07301 Various Lexmark products have an Integer Overflow. CVSS 3.0CRITICAL 9.8
- TI-2021-20251 PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be… CVSS 3.1HIGH 8.8
Sources
- CVE-2018-18894 · CVE Program
- CVE-2018-18894 · NVD
- FIRST EPSS
- GHSA-26xq-4h5f-fhh8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences